…

Information Security Engineer

Tredence · IT Services & Consulting

  • Bangalore
  • On-site
  • Posted today
  • Cybersecurity

About the job

Job Description – Security Architecture Analyst (ISG) Position

Security Architecture Analyst - Information Security Group (ISG)

Experience: 2 to 4 Years

Location: Bangalore

About Information Security Group (ISG)

The Information Security Group (ISG) under the CISO's Office is responsible for ensuring Security and Privacy across all internal and client-facing business operations. ISG focuses on strengthening the organization's security posture through governance, risk management, compliance, security architecture, and cybersecurity operations.

The team works collaboratively with stakeholders across the organization to provide assurance that confidential information is handled securely while meeting business objectives.

ISG comprises two key functions:

Cyber Security Governance, Risk & Compliance (GRC)
Cyber Security Technical Operations (TechOps)

Role Overview

We are looking for a highly motivated Security Architecture Analyst to join the Security Architecture (SecArch) team within TechOps. The role involves supporting security architecture initiatives, developing and maintaining security standards, assessing technical security controls, and contributing to the organization's overall cybersecurity maturity.

The ideal candidate should have hands-on exposure to cybersecurity technologies, cloud security concepts, and enterprise security architecture principles.

Key Responsibilities

Assist in developing, maintaining, and updating technical security standards, including hardening, encryption, and security baseline standards.
Support the creation and maintenance of security architecture frameworks, guidelines, and artifacts.
Review IT, cloud, and infrastructure changes to ensure alignment with security architecture requirements.
Track, manage, and review security exceptions, ensuring appropriate governance and timely closure.
Conduct technical security assessments and due diligence for third-party vendors, products, and services.
Participate in identifying security gaps and recommending mitigation measures across the organization.
Support security engineering initiatives and implementation of cybersecurity technologies.
Collaborate with vendors throughout solution evaluation, PoCs, implementation, upgrades, and operational support.
Assist in monitoring emerging cyber threats and recommend security improvements where necessary.
Work closely with infrastructure, cloud, network, and application teams to strengthen the organization's cybersecurity posture.
Contribute to security reporting, control effectiveness reviews, and continuous improvement initiatives.
Support cybersecurity budget planning, tracking, and reporting activities.

Required Skills & Knowledge

2 to 4 years of experience in Information Security, Cyber Security, Security Architecture, or Security Engineering.
Good understanding of cybersecurity technologies such as:
EDR/XDR
SIEM & SOAR
CASB & SASE
WAF & Firewalls
PAM/PIM
UEBA
Threat Hunting
Anti-DDoS & ASM Solutions
Basic understanding of Enterprise Security Architecture and Cyber Resilience concepts.
Familiarity with Cloud Security fundamentals across Azure, AWS, or GCP.
Knowledge of securing networks, servers, cloud environments, virtualization platforms, applications, and endpoint systems.
Understanding of security risk management and technical control implementation.
Awareness of current cyber threat trends and security best practices.

Preferred Knowledge

Exposure to one or more of the following frameworks and standards:

ISO 27001
NIST Cyber Security Framework (CSF)
NIST 800-53
PCI DSS
SOC 1 / SOC 2
HIPAA
SOX Controls
ISO 22301

Education & Certifications

Education:

Bachelor's degree in Engineering, Computer Science, Information Technology, Cyber Security, or equivalent.

Preferred Certifications (Any One):

CISSP
CISM
CCSP
ISO 27001 Lead Implementer / Lead Auditor
Microsoft Azure Security Certifications
AWS Security Certifications
Google Cloud Security Certifications

Key Competencies

Strong analytical and problem-solving skills.
Excellent communication and stakeholder management abilities.
Attention to detail and strong documentation skills.
Ability to work independently and collaboratively in a fast-paced environment.
Continuous learner with a passion for cybersecurity.
Self-driven, proactive, and innovative mindset.