Job Title: Information Security Engineer (Defence) Function: ESQA (Enterprise Security, Quality and Assurance), Defence vertical

Experience:
3 to 4 years Reports to: CISO

Location:
Bangalore Role purpose You will help keep Amin holdings/Avo Automation's products and infrastructure secure by finding and fixing weaknesses, watching for attacks, and giving engineering and IT clear, practical security guidance. You'll work with product engineering, IT infrastructure and our managed SOC.

Key responsibilities
Core (primary focus)
• Application security: run and manage SAST and DAST scans in the development pipeline, triage findings, work with developers on fixes, verify them before release, and track closure against agreed timelines. Support secure SDLC practices.
• Vulnerability assessment and penetration testing (internal and external): plan and coordinate VAPT cycles, carry out vulnerability scans and hands-on testing, review third-party VAPT reports, track remediation to closure, and retest.
• Security event log monitoring: monitor and triage alerts from the SIEM, work with the managed SOC on investigations, tune detection rules, keep log-source coverage complete, and support incident response. Supporting 4. Security technologies review: assess the effectiveness of security controls (for example EDR, firewall, WAF, email security, DLP) and report gaps and improvements. 5. Change management: do security reviews of infrastructure and application changes, assess risk, and make sure testing evidence and approvals are in place. 6.



External attack surface and dark web monitoring: track internet-facing assets, domains and leaked credentials, and act on findings. 7. Threat intelligence: use threat feeds and advisories, judge what applies to our environment, and share short briefs with IT and engineering. 8. Prepare security metrics and give evidence for ISO 27001 and SOC 2 audits. Must-have skills (the first three areas above)
• Hands-on experience with SAST and DAST tools (such as Burp Suite, Snyk, SonarQube or similar) and OWASP Top 10.
• Practical VA/PT experience with scanners and manual testing across web applications, networks and infrastructure.
• Experience with SIEM and log analysis, alert triage and incident investigation.
• Sound grounding in networking, Windows and Linux, and cloud security (Azure or AWS). Valuable to have
• Working knowledge of change management, attack surface and dark web monitoring, and threat intelligence.
• Scripting (Python or PowerShell) for automation.
• Certifications such as CEH, OSCP, CompTIA Security+, or cloud security and SIEM certifications.
• Exposure to ISO 27001 or SOC 2 audits, and to a SaaS or product company.
• Awareness of AI/LLM security risks. Qualifications B.
E./B.
Tech or equivalent in Computer Science, IT, Electronics, Cyber Security or a related field. Soft skills Clear written and verbal communication, the ability to explain findings to developers and non-technical teams, and a habit of following issues through to closure.

📌 Information Security Engineer (Bengaluru)
🏢 The SLK Group
📍 Bengaluru