Information Security Engineer

What We're Looking For :

We are looking for someone who has built security capabilities at scale, not someone who has only administered security frameworks.

- 12+ years of experience in information/cyber security, with significant experience leading security for a large-scale digital, fintech, technology or consumer business.

- Has built a security function from 0- 1 or transformed one during a period of rapid scale

- Has worked in high-sensitivity environments such as fintech, payments, banking, digital identity, large consumer technology or other critical digital infrastructure.

- Has operated at a large consumer scale, ideally having secured a product or platform with millions of users, transactions or sensitive data flows.

- Strong understanding of cloud-native security, API security, distributed systems, identity and access management, data security, application security and network security.

- Deep understanding of the modern cyber-threat landscape, including supply-chain attacks, API abuse, identity attacks, ransomware, cloud vulnerabilities, data exfiltration and attacks across interconnected ecosystems.

- Demonstrated understanding of AI security and the emerging agentic threat landscape, including risks arising from autonomous agents, model/data access, identity, permissions and machine-to-machine interactions.

- Has experience building security-by-design / DevSecOps practices in high-velocity engineering organisations.

- Has led major security incidents or crisis situations and understands what it takes to protect and recover a business when things go wrong.

- Strong understanding of ISO 27001, DPDP Act, IT Act, CERT-In requirements and other relevant regulatory frameworks.

- Relevant certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer are useful, but demonstrated capability matters more than certifications.