Information Security Engineer

This role is for one of Weekday’s clients
Salary range: Rs 2000000 - Rs 4000000 (ie INR 20 - 40 LPA)

Min Experience: 2+ years
Location: Bangalore
JobType: full-time

We are looking for an Information Security Engineer with 2–6 years of experience to strengthen cloud, infrastructure, and data security across the organization. The ideal candidate will have strong fundamentals in information security, hands-on experience securing cloud environments, and the ability to build automated security solutions that improve prevention, detection, and response.

In this role, you will work closely with engineering, infrastructure, and product teams to identify security risks, implement mitigation strategies, and build scalable security frameworks. You will primarily focus on AWS security while contributing to broader cloud security initiatives across infrastructure, applications, workloads, and data systems.

• Cloud and Infrastructure Security: Identify internal and external security vulnerabilities, collaborate with stakeholders on remediation, and design secure solutions for complex AWS-based environments.
• Cloud Security Posture Management (CSPM): Own and continuously improve the CSPM program, aligning security controls with industry standards and frameworks such as NIST 800-53 and ISO 27001.
• Cloud Workload Protection: Manage cloud workload protection initiatives, including security alert investigation, triage, incident analysis, and remediation.
• Data Security: Drive data security initiatives covering data classification, masking, access controls, and protection of large-scale data stores.
• Security Automation and Tooling: Automate infrastructure security processes and develop custom security tools to minimize manual effort and improve operational efficiency.
• Security Reviews and Threat Modelling: Conduct security design, infrastructure, and architecture reviews. Translate product requirements into threat models, identify potential risks, and recommend appropriate controls.
• Cloud Security Platforms: Build, operate, and maintain cloud security platforms that enhance threat prevention, detection, monitoring, and incident response.
• Security Frameworks and Compliance: Develop internal security frameworks and support compliance requirements across teams, including PCI DSS, ISO 27001, and the Digital Personal Data Protection Act (DPDP Act).
• Engineering Security Culture: Promote security best practices, improve security awareness, and help engineering teams strengthen their security maturity.
• Emerging Technologies: Explore AI-driven security workflows involving large language models (LLMs), Model Context Protocol (MCP), and AI agents.

• Strong understanding of Information Security, including core security principles such as least privilege, defence-in-depth, and zero trust.
• Hands-on experience in Cloud Security, particularly securing cloud infrastructure, workloads, and applications.
• Practical experience with AWS security services, cloud architecture, identity and access management, and security configurations.
• Solid fundamentals in computer networking, Linux operating systems, containers, and secure infrastructure design.
• Proficiency in at least one scripting or programming language, such as Python, Go, or Bash.
• Experience developing or automating custom security tools and workflows.
• Understanding of microservices, CI/CD pipelines, container security, and vulnerability management.
• Familiarity with vulnerability assessment, patch management cycles, and the Common Vulnerability Scoring System (CVSS).
• Strong analytical, communication, and stakeholder-management skills.

• Experience securing cloud environments on GCP or Microsoft Azure.
• Familiarity with security tooling, cloud security posture management, and cloud workload protection platforms.
• Understanding of compliance frameworks such as NIST 800-53, ISO 27001, and PCI DSS.
• Basic knowledge of LLMs, MCP, and AI agents, with an interest in developing AI-powered security workflows.
• Security-related projects on GitHub, technical blogs, or other contributions demonstrating practical security expertise.

Experience: 2–6 years in Information Security, Cloud Security, Infrastructure Security, or a related domain.