Cyber Security & Infrastructure Engineer

JOB DESCRIPTION

Cyber Security \& Infrastructure Engineer

Experience 1\.5 to 2 years

Department IT / Information Security

Employment Type Full\-Time

Industry Fintech / NBFC

Location Ahmedabad, Gujarat

About the Role

We are looking for a proactive Cyber Security \& Infrastructure Engineer with 1\.5 years or more of relevant experience in IT infrastructure, cybersecurity operations, network security, system administration, and security monitoring. The candidate will help maintain a secure and reliable technology environment by implementing security controls, monitoring infrastructure, managing vulnerabilities, and supporting applicable regulatory and audit requirements.

Key Responsibilities

Cybersecurity Operations

• Monitor security alerts, system logs, and suspicious activities to identify potential threats.
• Support vulnerability assessments, penetration testing coordination, and remediation tracking.
• Help protect sensitive customer information, personally identifiable information (PII), and financial data.
• Support endpoint protection (antivirus/EDR), firewall, and intrusion detection/prevention controls.
• Assist with security incident investigation, documentation, escalation, and root cause analysis.
• Support Data Loss Prevention (DLP) controls to reduce unauthorized data sharing or transfers.

IT Infrastructure \& Network Security

• Administer and monitor servers, operating systems, network devices, and cloud infrastructure.
• Support firewall rules, VPNs, access controls, network segmentation, and secure remote access.
• Perform system hardening, security patching, and operating system updates.
• Monitor infrastructure availability, performance, backups, and security configurations.
• Support cloud security and identity/access management in platforms such as Oracle Cloud, AWS, or Azure.
• Assist with backup, disaster recovery (DR), and business continuity (BCP) activities.

Identity \& Access Management

• Manage user access provisioning, modification, and deactivation based on approved requests.
• Support role\-based access control (RBAC), least privilege, and multi\-factor authentication (MFA).
• Conduct periodic access reviews and identify inactive, excessive, or privileged access.

Security Compliance \& Audit

• Support cybersecurity and IT control requirements applicable to an RBI\-regulated NBFC.
• Assist with internal/external audits, VAPT, evidence collection, and audit response.
• Maintain asset inventories, access review records, patch reports, incident logs, and security documentation.
• Track audit observations and coordinate timely remediation with relevant teams and vendors.

Monitoring, Reporting \& Incident Response

• Monitor events using available SIEM, EDR, firewall, and infrastructure monitoring tools.
• Escalate critical security incidents and infrastructure issues promptly.
• Prepare periodic reports on vulnerabilities, patch compliance, access reviews, security alerts, and infrastructure health.
• Coordinate with development, infrastructure, and third\-party vendor teams to resolve security issues.

Required Technical Skills

• Networking: TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and firewall fundamentals.
• Operating Systems: Windows Server and Linux administration.
• Security Tools: Exposure to firewalls, antivirus/EDR, vulnerability scanners, and SIEM platforms.
• Infrastructure: Server administration, patch management, backup solutions, and basic cloud security.
• Security Fundamentals: Vulnerability management, system hardening, access control, incident response, and log analysis.
• Cloud Platforms: Basic knowledge of Oracle Cloud Infrastructure (OCI), AWS, or Microsoft Azure.
• Scripting: Basic Python, PowerShell, or Bash scripting is an advantage.
• Documentation: Ability to maintain technical documentation, security reports, and audit evidence.

Qualifications \& Experience

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 1\.5 years of relevant experience in cybersecurity, IT infrastructure, network administration, or information security operations.
• Certifications such as CompTIA Security\+, CCNA, Microsoft Security, or cloud security certifications are preferred, not mandatory.

Preferred Candidate Profile

• Strong troubleshooting, analytical, and problem\-solving skills.
• Understanding of confidentiality and secure handling of customer information.
• Ability to coordinate with internal teams, auditors, and external technology vendors.
• Proactive approach to identifying and resolving security risks.
• Good communication, documentation, and incident reporting skills.

Preferred Certifications

CompTIA Security\+

Certified Ethical Hacker (CEH)

ISO 27001 Lead Implementer

Key Performance Indicators (KPIs)

• Timely identification, tracking, and remediation of vulnerabilities.
• Security patch compliance across servers and endpoints.
• Timely closure of security audit observations.
• Completion of access reviews and appropriate privileged account controls.
• Timely detection, escalation, and documentation of security incidents.
• Monitoring of backup jobs and participation in recovery tests.
• Adherence to approved security policies and infrastructure hardening standards.

Note: The role supports the organization’s cybersecurity and infrastructure controls in line with applicable regulatory requirements, internal policies, and the organization’s risk profile.

Pay: ₹400,000\.00 \- ₹800,000\.00 per year

Benefits

• Flexible schedule
• Health insurance
• Paid sick time
• Provident Fund
• Work from home

Work Location: In person