Who We Are: Osmos, a B2B SaaS company founded by ex-Amazon ad-tech experts, is revolutionizing retail media with an AI-powered operating system that increases retailer profitability (by up to 7% of sales) and delivers superior ROAS for brands. By enabling Tier 1 retailers and marketplaces worldwide to activate more brands and leverage advanced targeting, we help them secure a lasting competitive edge.

Your Impact:

As an Information Security Analyst at Osmos, you will work hands-on across every part of our security program: application and code security, cloud and identity security, and governance, risk and compliance. Retailers trust us with their business data. You will help keep that trust by finding and fixing risks early, keeping our ISO 27001 and SOC 2 programs audit-ready, and making the secure way the easy way for our engineers.

You will work closely with our Senior Information Security Analyst and with engineering, IT and customer-facing teams. This role suits someone who wants to grow into a well-rounded security engineer rather than specialize in one tool.

What You'll Do:

Application & code security:

- Triage findings from code, dependency and container scans, and work with developers to fix them within agreed timelines
- Track vulnerabilities from scans and third-party penetration tests through to closure
- Help review new features, AI integrations and open-source libraries for security risks

Cloud & identity security

- Manage and review access on Google Cloud, Google Workspace and GitHub using least privilege
- Run periodic user access reviews and joiner, mover and leaver checks
- Monitor security alerts and cloud posture findings, and support incident response

Governance, risk & compliance





- Maintain ISO 27001 and SOC 2 controls and evidence in our compliance platform, and support internal and external audits
- Draft and update security policies and procedures, and keep the risk register current
- Answer customer security questionnaires and RFPs, and run security reviews of new vendors
- Support privacy compliance (GDPR, India's DPDP Act, CCPA), business continuity and disaster recovery tests, and security awareness training

You'll Thrive If You Have:

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related field
- 1.5–3 years of experience in information security
- Hands-on experience in at least one of application security, cloud or IAM security, and GRC, with working knowledge of the other two
- Understanding of common web vulnerabilities (OWASP Top 10) and how vulnerabilities are managed to closure
- Familiarity with a cloud platform (Google Cloud preferred; AWS or Azure is fine) and IAM concepts such as least privilege and service accounts
- Exposure to ISO 27001, SOC 2 or GDPR, and to how controls are evidenced in an audit
- Clear written and spoken English: you can explain a risk to an engineer and answer a customer's security question
- Curiosity, and comfort using AI tools responsibly to work faster

Why Choose Osmos?

- Startup Energy, Enterprise Scale: Fast-paced innovation with global ambition
- Revolutionize Retail Marketing: Be at the forefront of AI-powered solutions
- Meaningful Contribution: Directly impacts major brands' success
- No Red Tape: Autonomy and empowerment to drive results
- Growth & Fun: Continuous learning in a vibrant, team-oriented culture
- Competitive Rewards: We value your expertise and offer strong compensation

📌 Information Security Engineer (Pune)
🏢 Osmos
📍 Pune