Cyber Security & Infrastructure Engineer

Accountabilities:

• Support the annual SOC 2 Type II audit program, including control design, evidence collection, remediation tracking, auditor coordination, and continuous compliance monitoring.
• Maintain an audit-ready environment by developing and documenting security policies, procedures, risk assessments, controls, and evidence repositories.
• Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change-management controls are consistently implemented and maintained.
• Administer and optimize Microsoft Sentinel, including security monitoring, analytics rules, alerting, dashboards, and automated workflows.
• Monitor and investigate threats identified through Microsoft Defender, Sentinel, AWS security services, and other security platforms.
• Lead security incident response activities, including investigation, containment, remediation, recovery, and coordination of forensic activities when required.
• Conduct threat hunting, vulnerability management, security assessments, penetration testing support, tabletop exercises, and disaster recovery testing.
• Design, implement, and maintain secure Microsoft Azure environments using services and capabilities such as Entra ID, Conditional Access, Privileged Identity Management, Defender for Cloud, Microsoft Purview, and related security technologies.
• Secure AWS environments through appropriate implementation and management of IAM, CloudTrail, GuardDuty, Security Hub, Config, CloudWatch, and other security controls.
• Apply zero-trust principles across cloud, identity, infrastructure, and endpoint environments.
• Maintain and support hybrid infrastructure spanning Azure, AWS, Active Directory, Entra ID, Windows Server, virtualization platforms, Microsoft 365, networks, and security appliances.
• Design and maintain high-availability and disaster recovery solutions while supporting cloud migrations and infrastructure modernization initiatives.
• Manage identity lifecycles, privileged access, periodic access reviews, and related security controls.
• Develop security automation using PowerShell, Azure Automation, Logic Apps, and Sentinel SOAR capabilities.
• Create executive and operational cybersecurity dashboards and metrics to track security performance, vulnerabilities, incidents, compliance, and operational efficiency.
• Identify opportunities to improve security processes, automate repetitive activities, strengthen controls, and increase operational efficiency.
• Participate in an on-call rotation supporting critical security incidents and infrastructure issues.

Requirements:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
• 3–5+ years of experience in cybersecurity and infrastructure engineering.
• 3+ years of experience managing and securing Microsoft Azure environments.
• 2+ years of experience administering Microsoft Sentinel or a comparable SIEM platform.
• Demonstrated experience supporting SOC 2 Type II audits and maintaining security and compliance controls.
• Experience securing AWS cloud environments and working across multi-cloud or hybrid infrastructure.
• Practical experience with incident response, vulnerability management, security monitoring, and threat investigation.
• Strong knowledge of Microsoft Azure, Microsoft Sentinel, Microsoft Defender technologies, Microsoft Entra ID, Active Directory, and Microsoft 365 security.
• Experience with AWS security services, PowerShell scripting, vulnerability management platforms, SIEM operations, network security, and firewall administration.
• Understanding of identity and access management, privileged access controls, zero-trust principles, and cloud security architecture.
• Experience with security automation and SOAR technologies is highly valued.
• Familiarity with Microsoft Purview, Defender XDR, Intune, DLP technologies, Terraform, and Infrastructure as Code is preferred.
• Strong troubleshooting, analytical, problem-solving, and incident-management skills.
• Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.
• Ability to work independently in a fully remote environment and manage priorities in a fast-moving technology organization.
• One or more relevant certifications are preferred, including Microsoft SC-100, SC-200, SC-300, AZ-500, AZ-104, AWS Certified Security – Specialty, CISSP, CISM, GIAC certifications, or Security+.

Benefits:

• ₹2,000,000–₹2,500,000 INR annual compensation, depending on experience and relevant certifications.
• Fully remote, work-from-home position based in India.
• Opportunity to work across cybersecurity, cloud infrastructure, compliance, automation, and security engineering.
• Hands-on exposure to Microsoft Azure, AWS, Microsoft Sentinel, Microsoft Defender, Microsoft 365, and modern security technologies.
• Opportunity to play a key role in strengthening SOC 2 Type II compliance and enterprise cyber resilience.
• Exposure to cloud modernization, zero-trust security, security automation, and infrastructure engineering initiatives.
• Opportunity to contribute to security strategy and operational improvements in a growing, digitally enabled organization.
• Participation in an on-call rotation for critical security incidents and infrastructure support.