This role is for one of Weekday’s clients Salary range: Rs 2000000 - Rs 4000000 (ie INR 20 - 40 LPA)
Min Experience: 2+ years Location: Bangalore JobType: full-time
We are looking for an Information Security Engineer with 2–6 years of experience to strengthen cloud, infrastructure, and data security across the organization. The ideal candidate will have strong fundamentals in information security, hands-on experience securing cloud environments, and the ability to build automated security solutions that improve prevention, detection, and response.
In this role, you will work closely with engineering, infrastructure, and product teams to identify security risks, implement mitigation strategies, and build scalable security frameworks. You will primarily focus on AWS security while contributing to broader cloud security initiatives across infrastructure, applications, workloads, and data systems.
Requirements
Key Responsibilities
Cloud and Infrastructure Security: Identify internal and external security vulnerabilities, collaborate with stakeholders on remediation, and design secure solutions for complex AWS-based environments.
Cloud Security Posture Management (CSPM): Own and continuously improve the CSPM program, aligning security controls with industry standards and frameworks such as NIST 800-53 and ISO 27001.
Cloud Workload Protection: Manage cloud workload protection initiatives, including security alert investigation, triage, incident analysis, and remediation.
Data Security: Drive data security initiatives covering data classification, masking, access controls, and protection of large-scale data stores.
Security Automation and Tooling: Automate infrastructure security processes and develop custom security tools to minimize manual effort and improve operational efficiency.
Security Reviews and Threat Modelling: Conduct security design, infrastructure, and architecture reviews. Translate product requirements into threat models, identify potential risks, and recommend appropriate controls.
Cloud Security Platforms: Build, operate, and maintain cloud security platforms that enhance threat prevention, detection, monitoring, and incident response.
Security Frameworks and Compliance: Develop internal security frameworks and support compliance requirements across teams, including PCI DSS, ISO 27001, and the Digital Personal Data Protection Act (DPDP Act).
Engineering Security Culture: Promote security best practices, improve security awareness, and help engineering teams strengthen their security maturity.
Emerging Technologies: Explore AI-driven security workflows involving large language models (LLMs), Model Context Protocol (MCP), and AI agents.
Must-Have Skills
Strong understanding of Information Security , including core security principles such as least privilege, defence-in-depth, and zero trust.
Hands-on experience in Cloud Security , particularly securing cloud infrastructure, workloads, and applications.
Practical experience with AWS security services , cloud architecture, identity and access management, and security configurations.
Solid fundamentals in computer networking, Linux operating systems, containers, and secure infrastructure design.
Proficiency in at least one scripting or programming language, such as Python, Go, or Bash.
Experience developing or automating custom security tools and workflows.
Understanding of microservices, CI/CD pipelines, container security, and vulnerability management.
Familiarity with vulnerability assessment, patch management cycles, and the Common Vulnerability Scoring System (CVSS).
Strong analytical, communication, and stakeholder-management skills.
Good-to-Have Skills
Experience securing cloud environments on GCP or Microsoft Azure .
Familiarity with security tooling, cloud security posture management, and cloud workload protection platforms.
Understanding of compliance frameworks such as NIST 800-53, ISO 27001, and PCI DSS.
Basic knowledge of LLMs, MCP, and AI agents, with an interest in developing AI-powered security workflows.
Security-related projects on GitHub, technical blogs, or other contributions demonstrating practical security expertise.
Experience and Ideal Candidate Profile
Experience: 2–6 years in Information Security, Cloud Security, Infrastructure Security, or a related domain.
... operational information risk within/against Nike - Staying current on security technologies, trends, standards and best practices - Continually update relevant security skills - Other duties and responsibilities as assigned based on need of the business requirements. As a Nike Lead InformationSecurity Engineer the following ...
IT & Information Security EngineerFocus : Own the IT backbone and the security program that protects it - identity, endpoints, network, cloud, security operations, and compliance for a company delivering immersive technology at https://jobeax.com/link/u58AGUXnbYp1PRsD Mission :About https://jobeax.com/link/yqp5bsWqaylXoS34 ...
About the Role We are seeking a highly skilled Network and Information Security Engineer with a demonstrated history of successfully delivering complex projects. This position requires both technical proficiency and strategic insight to design secure, scalable network architectures that meet business objectives. Key Responsibilities ...
... Security/Automation teams to assess, analyze, and optimize operational tasks, functions, documenting and processes. WHO WE ARE LOOKING FOR We’re looking for an Senior Security Automation Engineer. This role on the team will be focused on the automation and integration of various security tools to drive accountability & visibility ...
Role Overview : We are seeking a seasoned SIP Operations & Compliance Engineer to serve as a cornerstone of our information governance and security infrastructure. In this role, you will oversee the end-to-end lifecycle of our compliance frameworks, ensuring that our data protection strategies align with global regulatory ...
... functions or platforms, with exposure to Supply Chain, ERP, CRM, cloud platforms, data/analytics, AI, automation, or domain-specific systems. - 3+ years of Information Security experience (BISO, security architect, engineer, or risk leader experience strongly preferred). - Demonstrated experience supporting large-scale digital ...
... across our AWS multi-region deployments and direct security-engineering execution within the Platform team. - The team — Hire and manage a Senior Manager of Information Security & Compliance. Provide dotted-line leadership to security engineering within Platform/DevOps and manage consultant, MSSP, and penetration-testing ...
... Security Scope (indicate either “global/cross-border” or “local/country”): Global/cross-border Sub Function: Identity and Access Management Job Summary: The Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials. ...
... can independently own these responsibilities while remaining deeply involved in hands-on security work. Responsibilities - Partner with global Information Security, Compliance, Legal, and Engineering teams to support applicable regulation and local cybersecurity obligations - Translate regulatory and security requirements ...