Shift: 1:00 PM 10:00 PM (IST)

Experience: 4-6 years

Role overview

We are seeking an experienced Information Security Engineer with 4-6 years of hands-on experience across multiple cybersecurity domains. The ideal candidate will have a strong foundation in Identity and Access Management (IAM), vulnerability management, application security, incident management, and governance, risk, and compliance (GRC). This role requires a proactive security professional who can collaborate with internal teams and support enterprise security initiatives in a fast-paced environment.

Key responsibilities:

Manage and support Identity and Access Management (IAM) processes, including user provisioning, access reviews, and privilege management.
Perform vulnerability assessments, coordinate remediation efforts, and track closure of identified security issues.
Support application security activities, including security assessments, secure development practices, and remediation coordination.
Participate in security incident detection, investigation, response, and post-incident analysis.
Contribute to governance, risk, and compliance (GRC) initiatives, including risk assessments, policy management, and compliance monitoring.
Work with cross-functional teams to implement and maintain security controls across infrastructure and applications.
Assist in security audits, documentation, and compliance evidence collection.
Collaborate with stakeholders to improve the organizations overall security posture.

Required qualifications

4-6 years of experience in Information Security / Cybersecurity.
Strong hands-on experience in:
Identity and Access Management (IAM)
Vulnerability Management
Application Security
Security Incident Management
Governance, Risk, and Compliance (GRC)
Good understanding of enterprise security frameworks, security controls, and risk management practices.
Strong analytical, problem-solving, and communication skills.

Preferred qualifications:

Experience supporting SOC 2 readiness and/or ISO 27001 certification initiatives.
Knowledge of AWS Cloud Security, including cloud security best practices and security controls.
Experience interacting with clients, auditors, or external stakeholders.
Industry certifications such as CompTIA Security+, CISSP, or equivalent.

What were looking for

A well-rounded security professional with exposure across multiple security functions.
Ability to work independently while collaborating effectively with global and cross-functional teams.
Strong ownership mindset and attention to detail.
Excellent communication and stakeholder management skills.

Analyst - Information Security (Security, VM & GRC)