Information Security Engineer

Operate and mature the Security Operations Centre (SOC) covering EDR, SIEM, SOAR, CSPM, IAM, firewalls, and NIDS/NIPS.

Analyze security alerts and logs, conduct threat hunting, report vulnerabilities, and recommend remediation to technology teams.

Support regulatory compliance in India by preparing audit evidence, coordinating with auditors, and managing observation closure.

3+ years hands-on experience in enterprise IT environments with endpoint and application management on-premises or cloud and/or previous SOC experience.

Experience with security controls like identity and access management, vulnerability management, and endpoint detection and response.

Working knowledge or strong willingness to learn Indian cybersecurity regulations (SEBI CSCRF, NSE/BSE/MCX circulars, CERT-In) and familiarity with ISO 27001 and NIST CSF.

Experience supporting audits (cyber, systems, VAPT, ISO, SOC 2) including evidence preparation and auditor coordination.

Experienced in SOC operations with ability to leverage automation, AI-assisted tooling, and low-code/no-code for security workflows.

Ability to translate technical security findings into audit-ready evidence and regulatory reports with strong documentation skills.

Familiarity with MITRE ATT&CK framework and proactive in maturing security functions through own initiatives.