Digantara is a leading Space Surveillance and Intelligence company focused on ensuring orbital safety and sustainability. With expertise in space-based detection, tracking, identification, and monitoring, Digantara provides comprehensive domain awareness across all regimes, enabling end-users to gain actionable intelligence on a single platform. At the core of its infrastructure lies a sophisticated integration of hardware and software capabilities aligned with the key principles of situational awareness: perception (data collection), comprehension (data processing), and prediction (analytics).

This holistic approach empowers Digantara to monitor all Resident Space Objects (RSOs) in orbit, fostering comprehensive domain awareness.

Why Us?

- Be part of a cooperative and innovative environment where your ideas and skills make a real difference to the entire space realm.
- Push the boundaries with hands-on experience, greater responsibilities, and rapid career advancement.
- Competitive incentives, galvanising workspace, blazing team—pretty much everything you have heard about a startup.

Ideal Candidate:

- The Security Engineer 2 is a mid-level (L2) engineer who owns IT security governance, ISO and SOC 2 audit readiness, network security, AWS cloud security and product security.

Responsibilities:

IT security and GRC:

- Maintain the security policy set, risk register and control mapping, and run policy rollout and user acceptance.
- Run risk assessments and track treatment actions to closure.
- Review the security of vendors and third parties before they are onboarded.
- Review Microsoft 365, Entra ID and email security configuration against the security baseline.

ISO and SOC 2 audit readiness:

- Own the readiness plan: scoping, control owners,



evidence collection and internal audits.
- Coordinate with external auditors, prepare for audits and drive remediation of findings.
- Define security requirements for IT controls, and check that IT controls produce the evidence auditors need.

Cloud security (AWS):

- Review AWS accounts for risky configuration across IAM, network exposure, logging, encryption and storage access.
- Define and enforce account guardrails and baseline configurations, and monitor cloud security posture.
- Review infrastructure-as-code and architecture changes for security before release.

Network security:

- Review firewall, VPN and segmentation design and rule changes for security.
- Review Wi-Fi and remote access security, and make sure findings from network audits are fixed.
- Define network security requirements and monitoring, working with IT & Network Ops, who run the network.

Product security:

- Build security into the development lifecycle through threat modeling and secure design reviews.
- Run and triage static analysis, dependency and secrets scanning, and track fixes with engineering teams.
- Coordinate penetration tests and handle vulnerability reports against company products.

Operations and awareness:

- Support vulnerability management and incident response with the Enterprise Security Engineer.
- Run phishing exercises and security awareness sessions.




- Help define and enforce security controls for AI tools, including access, data handling and connector permissions.

Qualifications:

• 3 to 6 years of experience in security engineering, GRC, network, cloud or product security

- Hands-on experience with ISO and SOC 2: implementing controls, collecting evidence and supporting internal or external audits.
- Practical AWS security experience: IAM, VPC networking, logging, encryption and key management, and native security services.
- Working knowledge of network security: firewalls, VPNs, segmentation and secure Wi-Fi.
- Application security experience: secure development lifecycle, threat modeling, static analysis, and dependency and secrets scanning.
- Experience writing policies, risk assessments and procedures that teams actually follow.
- Scripting (Python or Bash) and familiarity with infrastructure-as-code such as Terraform or CloudFormation.
- Strong written and spoken communication, including explaining risk to non-technical staff.

Bachelor's degree in computer science, information technology or a related field, or equivalent experience

Preferred Qualities:

• Certifications such as AWS Security Specialty, CISSP, CISM, CCSP, or ISO 27001 Lead Implementer or Auditor.

- Experience with enterprise firewall and VPN platforms.
- Experience with a compliance automation platform such as Sprinto.
- Experience securing containers, Kubernetes and CI/CD pipelines.
- Understanding of endpoint management, EDR and CASB from a requirements and audit-evidence point of view.
- Familiarity with Microsoft 365 and Entra ID security configuration.
- Experience writing usage and security policies for AI tools.

Job Location: Hebbal, Bengaluru(5Days Office setup)

📌 Security Engineer 2 (Bengaluru)
🏢 Digantara
📍 Bengaluru