Cyber Security & Infrastructure Engineer

Accountabilities:

• • Support the annual SOC 2 Type II audit program, including control design, evidence collection, remediation tracking, auditor coordination, and continuous compliance monitoring.
  • Maintain an audit-ready environment by developing and documenting security policies, procedures, risk assessments, controls, and evidence repositories.
  • Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change-management controls are consistently implemented and maintained.
  • Administer and optimize Microsoft Sentinel, including security monitoring, analytics rules, alerting, dashboards, and automated workflows.
  • Monitor and investigate threats identified through Microsoft Defender, Sentinel, AWS security services, and other security platforms.
  • Lead security incident response activities, including investigation, containment, remediation, recovery, and coordination of forensic activities when required.
  • Conduct threat hunting, vulnerability management, security assessments, penetration testing support, tabletop exercises, and disaster recovery testing.
  • Design, implement, and maintain secure Microsoft Azure environments using services and capabilities such as Entra ID, Conditional Access, Privileged Identity Management, Defender for Cloud, Microsoft Purview, and related security technologies.
  • Secure AWS environments through appropriate implementation and management of IAM, CloudTrail, GuardDuty, Security Hub, Config, CloudWatch, and other security controls.
  • Apply zero-trust principles across cloud, identity, infrastructure, and endpoint environments.
  • Maintain and support hybrid infrastructure spanning Azure, AWS, Active Directory, Entra ID, Windows Server, virtualization platforms, Microsoft 365, networks, and security appliances.
  • Design and maintain high-availability and disaster recovery solutions while supporting cloud migrations and infrastructure modernization initiatives.
  • Manage identity lifecycles, privileged access, periodic access reviews, and related security controls.
  • Develop security automation using PowerShell, Azure Automation, Logic Apps, and Sentinel SOAR capabilities.
  • Create executive and operational cybersecurity dashboards and metrics to track security performance, vulnerabilities, incidents, compliance, and operational efficiency.
  • Identify opportunities to improve security processes, automate repetitive activities, strengthen controls, and increase operational efficiency.
  • Participate in an on-call rotation supporting critical security incidents and infrastructure issues.

  Requirements:

  • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred.
  • 3–5+ years of experience in cybersecurity and infrastructure engineering.
  • 3+ years of experience managing and securing Microsoft Azure environments.
  • 2+ years of experience administering Microsoft Sentinel or a comparable SIEM platform.
  • Demonstrated experience supporting SOC 2 Type II audits and maintaining security and compliance controls.
  • Experience securing AWS cloud environments and working across multi-cloud or hybrid infrastructure.
  • Practical experience with incident response, vulnerability management, security monitoring, and threat investigation.
  • Strong knowledge of Microsoft Azure, Microsoft Sentinel, Microsoft Defender technologies, Microsoft Entra ID, Active Directory, and Microsoft 365 security.
  • Experience with AWS security services, PowerShell scripting, vulnerability management platforms, SIEM operations, network security, and firewall administration.
  • Understanding of identity and access management, privileged access controls, zero-trust principles, and cloud security architecture.
  • Experience with security automation and SOAR technologies is highly valued.
  • Familiarity with Microsoft Purview, Defender XDR, Intune, DLP technologies, Terraform, and Infrastructure as Code is preferred.
  • Strong troubleshooting, analytical, problem-solving, and incident-management skills.
  • Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams.
  • Ability to work independently in a fully remote environment and manage priorities in a fast-moving technology organization.
  • One or more relevant certifications are preferred, including Microsoft SC-100, SC-200, SC-300, AZ-500, AZ-104, AWS Certified Security – Specialty, CISSP, CISM, GIAC certifications, or Security+.

  Benefits:

  • ₹2,000,000–₹2,500,000 INR annual compensation, depending on experience and relevant certifications.
  • Fully remote, work-from-home position based in India.
  • Opportunity to work across cybersecurity, cloud infrastructure, compliance, automation, and security engineering.
  • Hands-on exposure to Microsoft Azure, AWS, Microsoft Sentinel, Microsoft Defender, Microsoft 365, and modern security technologies.
  • Opportunity to play a key role in strengthening SOC 2 Type II compliance and enterprise cyber resilience.
  • Exposure to cloud modernization, zero-trust security, security automation, and infrastructure engineering initiatives.
  • Opportunity to contribute to security strategy and operational improvements in a growing, digitally enabled organization.
  • Participation in an on-call rotation for critical security incidents and infrastructure support.