Job Opening For Information Security Engineer - Vadodara

Role - Information Security Engineer

Location - Vadodara

Exp - 3 to 5 years

Job Purpose

Manage, maintain, and continuously improve the organizations overall cybersecurity posture by supporting security operations, incident management, vulnerability management, compliance, and security improvement initiatives.

Key Responsibilities

• Support day-to-day operations, monitoring, and configuration of Firewalls, SWG, DLP, ZTNA, EDR/XDR, IPS, WAF, and other cybersecurity solutions.
• Monitor security alerts, perform initial incident analysis, and coordinate with SOC teams, OEMs, MSSPs, and vendors for timely incident resolution.
• Support Vulnerability Assessment, VAPT, risk assessments, vulnerability remediation, and security reviews.
• Support ISO 27001:2022 audits, compliance activities, and information security assessments.
• Assist in third-party/vendor security assessments and security compliance activities.
• Support cybersecurity incident investigation, RCA, reporting, evidence collection, and corrective actions.
• Monitor cybersecurity posture through security dashboards, KPIs, compliance metrics, and security reports.
• Coordinate with IT Infrastructure, Cloud, Application, SOC, and other technology teams to ensure timely closure of security findings.
• Support vulnerability remediation and patch compliance activities with relevant IT teams.
• Participate in security reviews of new IT projects and support implementation of Security by Design principles.
• Maintain cybersecurity SOPs, procedures, checklists, reports, and other security documentation.
• Coordinate with IT teams, SOC, OEMs, MSSPs, and security vendors for security-related activities and issue resolution.
• Support evaluation and implementation of new cybersecurity technologies and security enhancements.
• Assist in basic forensic activities and evidence collection during cybersecurity incidents, when required.

Preferred Candidate Profile

• Hands-on experience with SIEM, SOAR, DLP, EDR/XDR, SWG, WAF, ZTNA, Email Security, and Vulnerability Management tools.
• Good understanding of TCP/IP, DNS, Active Directory, Windows, Linux, Cloud Security (AWS/Azure), and Identity & Access Management.
• Knowledge of NIST CSF, ISO 27001:2022, IEC 62443, CIS Controls, and OWASP Top 10.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to coordinate with cross-functional teams and manage multiple security initiatives.

If interested, please share your resume at [email removed]