Information Security Engineer | Noida

Location: Noida
Experience: Minimum 4 years

Responsibilities:

• Assist in the implementation and maintenance of information security strategies, ensuring alignment with regulatory requirements, industry standards, and business goals.
• Support the development and enforcement of information security policies, procedures, and best practices to protect data integrity, confidentiality, and availability.
• Monitor security alerts, analyze potential threats, and assist in incident detection, response, and resolution to mitigate security risks.
• Conduct risk assessments and vulnerability scans to identify security weaknesses and assist in remediation efforts.
• Work closely with engineering and IT teams to embed security best practices across the software development lifecycle and cloud infrastructure.
• Assist in security audits, compliance checks, and regulatory reporting to ensure adherence to RBI guidelines, DPDP Act, ISO 27001, and Cert-IN regulations.
• Manage and configure security tools such as firewalls, IDS/IPS, SIEM, endpoint protection, and vulnerability scanners.
• Assist in access control management, ensuring appropriate permissions and role-based access policies are in place.
• Contribute to security awareness programs, helping employees understand cybersecurity threats and best practices.
• Stay updated on emerging security threats, attack vectors, and defensive technologies, recommending enhancements to security processes.

Qualifications and Skills:

• Bachelors degree in Information Security, Computer Science, IT, or a related field.
• Minimum of 4 years of experience in information security, cybersecurity operations, or risk management.
• Hands-on experience with firewalls, IDS/IPS, SIEM tools, endpoint security, and vulnerability management.
• Strong understanding of network security, encryption, identity and access management (IAM), and cloud security (AWS, Azure, or GCP).
• Knowledge of security frameworks such as ISO 27001, NIST, CIS Controls, and RBI IT Guidelines.
• Exposure to penetration testing, security log analysis, incident response, and threat intelligence.
• Strong problem-solving, analytical, and communication skills.
• Relevant certifications preferred (CEH, Security+, CISSP (Associate), CISM).
• Ability to work in a fast-paced environment, collaborate with cross-functional teams, and maintain a security-first mindset.