Security Engineer

About the Role

Rubiscape operates at the intersection of AI, data, and enterprise decision-making — a position that demands uncompromising security across every layer of the platform. As a Security Engineer, you will own the design, implementation, and continuous hardening of security controls across Rubiscape’s SaaS, BYOC, on-premises, and air-gap deployment models. You will work directly with platform engineering and product teams to embed security into the fabric of a system trusted by Fortune 500 enterprises and government organisations with the most demanding compliance requirements in India and globally.

Key Responsibilities

· Design and implement layered security controls including RBAC, attribute-based access control, network segmentation, and encryption-at-rest and in-transit across all Rubiscape deployment models.

· Conduct regular threat modelling exercises (STRIDE/PASTA) for new platform features across RubiFlow, RubiStudio, RubiSight, RubiAI, and the Business Workbench.

· Build and maintain audit trail and data lineage security mechanisms to satisfy ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 requirements.

· Lead vulnerability assessments and penetration testing cycles; triage findings, assign severity, and drive remediation with engineering owners to closure within defined SLAs.

· Instrument SIEM pipelines (Splunk / ELK) with Rubiscape-specific detection rules for insider threats, data exfiltration, and privilege escalation attempts.

· Define and enforce security baselines for air-gap and on-premises deployments used in government and defence customer environments, including CERT-IN compliance requirements.

· Participate in customer trust reviews, security questionnaires, and pre-sales security assurance calls for enterprise and regulated-sector accounts.

Nice to Have

· Certifications: CISSP, CEH, OSCP, or equivalent.

· Experience securing multi-tenant SaaS platforms or enterprise data/AI platforms.

· Familiarity with CERT-IN guidelines and MeitY security frameworks for cloud-deployed enterprise software.

· Prior exposure to air-gap or high-assurance deployment environments in government or defence sectors.

About Rubiscape

Rubiscape is India’s leading Decision Intelligence Platform, unifying data engineering, BI, machine learning, and agentic AI in a single governed platform. Built in Pune and trusted by Fortune 500 enterprises across BFSI, manufacturing, healthcare, and government. 8 international innovation patents. 10 Industry-Academia Labs & COEs. From BI to AI — One Platform. Every Decision.

Requirements

Requirements

· 4+ years of experience in information security engineering within a product or SaaS company.

· Hands-on expertise with RBAC/ABAC design, PKI, secrets management (HashiCorp Vault or equivalent), and zero-trust network architecture.

· Practical experience with SIEM platforms (Splunk, ELK, or equivalent) including custom rule authoring and alert tuning.

· Working knowledge of ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 compliance frameworks.

· Proficiency in at least one scripting language (Python, Bash, or Go) for security automation and tooling.

· Strong documentation skills — ability to produce threat models, security design documents, and runbooks that engineering and compliance teams can act on.