Lead - Cybersecurity Engineer
Posted Updated
Description
<h1 dir="ltr" style="line-height:1.38;margin-top:24pt;margin-bottom:6pt;"></h1><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">Job Title:
Lead Cybersecurity Engineer</span></b></p><p></p><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">Location:</span></b><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;"> Bangalore</span><br /><b><span style="font-size:12px;">Work Arrangement:</span></b><span style="font-size:12px;"> Full-time</span><br /><b><span style="font-size:12px;">Experience:</span></b><span style="font-size:12px;"> 5+ Years</span></span></p><p></p><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">About Upstox</span></b></p><p></p><p class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">At Upstox,
we’re building the future of investing — simple, powerful, and for everyone.
We're one of India’s fastest-growing fintech platforms, backed by the best in
the business, including Mr. Ratan Tata and Tiger Global, and on a mission to
make wealth creation accessible to every Indian.</span></span></p><p></p><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">The Role</span></b></p><p></p><p class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">We are looking
for an experienced </span><b><span style="font-size:12px;">Lead Cybersecurity Engineer</span></b><span style="font-size:12px;"> with </span><b><span style="font-size:12px;">8+ years of
experience</span></b><span style="font-size:12px;"> to drive cybersecurity initiatives across Upstox. You will work
closely with Cybersecurity leadership and Technology teams to strengthen our
security posture across </span><b><span style="font-size:12px;">Cyber Defence, Incident Response, Cloud Security,
Vulnerability Management, Infrastructure Security, Threat Detection, and
Security Engineering</span></b><span style="font-size:12px;">.</span></span></p><p></p><p class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">This is a
hands-on leadership role requiring strong technical depth, ownership, and the
ability to lead complex security initiatives from strategy through execution.</span></span></p><p></p><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">What You'll
Do</span></b></p><p></p><ul style="margin-top:0cm;" type="disc"><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Lead and own cybersecurity
initiatives from </span><b><span style="font-size:12px;">identification and assessment through remediation and
closure</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Lead investigation, containment,
and response to complex security incidents and threats.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Drive </span><b><span style="font-size:12px;">SOC, threat detection,
threat hunting, and incident response</span></b><span style="font-size:12px;"> capabilities.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Identify and mitigate security
risks across applications, APIs, cloud, infrastructure, endpoints, and
internal systems.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Lead vulnerability management,
security assessments, penetration-test remediation, and security reviews.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Design, develop, and continuously
improve </span><b><span style="font-size:12px;">SIEM, EDR/XDR, detection use cases, monitoring, and response
processes</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Perform advanced threat hunting,
IOC analysis, attack-path analysis, and root-cause investigations.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Drive security automation and
improve </span><b><span style="font-size:12px;">MTTD, MTTR, detection coverage, and response effectiveness</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Partner with Engineering, DevOps,
Cloud, Infrastructure, and Product teams to drive security remediation and
secure-by-design practices.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Provide technical leadership and
mentorship to cybersecurity engineers and analysts.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Support security architecture
reviews, audits, compliance, and regulatory requirements.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Evaluate security tools,
technologies, and vendors and drive their effective implementation.</span></span><p></p></li></ul><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">What We're
Looking For</span></b></p><p></p><ul style="margin-top:0cm;" type="disc"><li class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">8+ years of experience</span></b><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;"> in Cybersecurity, Information
Security, Security Engineering, or Cyber Defence.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong hands-on expertise in
multiple areas including </span><b><span style="font-size:12px;">SOC, Incident Response, Threat Detection,
Cloud Security, Vulnerability Management, and Infrastructure Security</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong experience with </span><b><span style="font-size:12px;">SIEM,
EDR/XDR, SOAR, vulnerability management, firewalls, and security
monitoring platforms</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong understanding of networking,
IAM, authentication/authorization, APIs, endpoint security, cloud
security, and common attack techniques.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Proven experience leading complex
security incidents and driving remediation to closure.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong knowledge of </span><b><span style="font-size:12px;">MITRE
ATT&CK, threat intelligence, IOC analysis, detection engineering, and
threat hunting</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Hands-on experience with </span><b><span style="font-size:12px;">AWS</span></b><span style="font-size:12px;">
and cloud security controls.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong understanding of </span><b><span style="font-size:12px;">NIST,
ISO 27001, CIS</span></b><span style="font-size:12px;">, and security best practices.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Ability to independently lead
security programs and influence technical stakeholders across the
organization.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong analytical, problem-solving,
communication, and stakeholder-management skills.</span></span><p></p></li></ul><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">Good to Have</span></b></p><p></p><ul style="margin-top:0cm;" type="disc"><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Experience in </span><b><span style="font-size:12px;">FinTech, Banking,
Payments</span></b><span style="font-size:12px;">, or other regulated industries.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Experience with </span><b><span style="font-size:12px;">Palo Alto, IBM
QRadar, CrowdStrike, Cortex XDR, Trend Micro, BeyondTrust, IBM PAM, or One
Identity</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Experience with </span><b><span style="font-size:12px;">DevSecOps, CI/CD
security, CSPM, SOAR, security automation, or detection engineering</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Strong scripting/programming skills
in </span><b><span style="font-size:12px;">Python, PowerShell, or Bash</span></b><span style="font-size:12px;">.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Experience mentoring cybersecurity
teams and leading cross-functional security programs.</span></span><p></p></li><li class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Certifications such as </span><b><span style="font-size:12px;">CISSP,
OSCP, GCIH, GCIA, CEH, Security+</span></b><span style="font-size:12px;">, or equivalent.</span></span><p></p></li></ul><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">Why This
Role Rocks</span></b></p><p></p><p class="MsoNormal"><span style="font-family:Arial, sans-serif;"><span style="font-size:12px;">Work on
cybersecurity at the scale of a high-growth fintech platform, lead high-impact
security initiatives, solve complex security challenges, and work closely with
experienced Cybersecurity and Technology teams to strengthen Upstox's overall
security posture.</span></span></p><p></p><p class="MsoNormal"><b><span style="font-family:Arial, sans-serif;font-size:12px;">Upstox is an
Equal Opportunity Employer.</span></b></p><p></p>