Cyber Security & Infrastructure Engineer

• *About the Role**

We are looking for a proactive Cyber Security \& Infrastructure Engineer with 1\.5 years or more of relevant experience in IT infrastructure, cybersecurity operations, network security, system administration, and security monitoring. The candidate will help maintain a secure and reliable technology environment by implementing security controls, monitoring infrastructure, managing vulnerabilities, and supporting applicable regulatory and audit requirements.

• *Key ResponsibilitiesCybersecurity Operations**

• Monitor security alerts, system logs, and suspicious activities to identify potential threats.
• Support vulnerability assessments, penetration testing coordination, and remediation tracking.
• Help protect sensitive customer information, personally identifiable information (PII), and financial data.
• Support endpoint protection (antivirus/EDR), firewall, and intrusion detection/prevention controls.
• Assist with security incident investigation, documentation, escalation, and root cause analysis.
• Support Data Loss Prevention (DLP) controls to reduce unauthorized data sharing or transfers.

• *IT Infrastructure \& Network Security**

• Administer and monitor servers, operating systems, network devices, and cloud infrastructure.
• Support firewall rules, VPNs, access controls, network segmentation, and secure remote access.
• Perform system hardening, security patching, and operating system updates.
• Monitor infrastructure availability, performance, backups, and security configurations.
• Support cloud security and identity/access management in platforms such as Oracle Cloud, AWS, or Azure.
• Assist with backup, disaster recovery (DR), and business continuity (BCP) activities.

• *Identity \& Access Management**

• Manage user access provisioning, modification, and deactivation based on approved requests.
• Support role\-based access control (RBAC), least privilege, and multi\-factor authentication (MFA).
• Conduct periodic access reviews and identify inactive, excessive, or privileged access.

• *Security Compliance \& Audit**

• Support cybersecurity and IT control requirements applicable to an RBI\-regulated NBFC.
• Assist with internal/external audits, VAPT, evidence collection, and audit response.
• Maintain asset inventories, access review records, patch reports, incident logs, and security documentation.
• Track audit observations and coordinate timely remediation with relevant teams and vendors.

• *Monitoring, Reporting \& Incident Response**

• Monitor events using available SIEM, EDR, firewall, and infrastructure monitoring tools.
• Escalate critical security incidents and infrastructure issues promptly.
• Prepare periodic reports on vulnerabilities, patch compliance, access reviews, security alerts, and infrastructure health.
• Coordinate with development, infrastructure, and third\-party vendor teams to resolve security issues.

• *Required Technical Skills**

• **Networking:** TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and firewall fundamentals.
• **Operating Systems:** Windows Server and Linux administration.
• **Security Tools:** Exposure to firewalls, antivirus/EDR, vulnerability scanners, and SIEM platforms.
• **Infrastructure:** Server administration, patch management, backup solutions, and basic cloud security.
• **Security Fundamentals:** Vulnerability management, system hardening, access control, incident response, and log analysis.
• **Cloud Platforms:** Basic knowledge of Oracle Cloud Infrastructure (OCI), AWS, or Microsoft Azure.
• **Scripting:** Basic Python, PowerShell, or Bash scripting is an advantage.
• **Documentation:** Ability to maintain technical documentation, security reports, and audit evidence.

• *Qualifications \& Experience**

• Bachelor’s degree or diploma in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum 1\.5 years of relevant experience in cybersecurity, IT infrastructure, network administration, or information security operations.
• Certifications such as CompTIA Security\+, CCNA, Microsoft Security, or cloud security certifications are preferred, not mandatory.

• *Preferred Candidate Profile**

• Strong troubleshooting, analytical, and problem\-solving skills.
• Understanding of confidentiality and secure handling of customer information.
• Ability to coordinate with internal teams, auditors, and external technology vendors.
• Proactive approach to identifying and resolving security risks.
• Good communication, documentation, and incident reporting skills.

• *Key Performance Indicators (KPIs)**

• Timely identification, tracking, and remediation of vulnerabilities.
• Security patch compliance across servers and endpoints.
• Timely closure of security audit observations.
• Completion of access reviews and appropriate privileged account controls.
• Timely detection, escalation, and documentation of security incidents.
• Monitoring of backup jobs and participation in recovery tests.
• Adherence to approved security policies and infrastructure hardening standards.

• *Note:** The role supports the organization’s cybersecurity and infrastructure controls in line with applicable regulatory requirements, internal policies, and the organization’s risk profile.

Pay: ₹400,000\.00 \- ₹800,000\.00 per year

Benefits

• Flexible schedule
• Health insurance
• Paid sick time
• Paid time off
• Provident Fund

Work Location: In person