Cyber Security & Infrastructure Engineer

Job description

Accountabilities: Support the annual SOC 2 Type II audit program, including control design, evidence collection, remediation tracking, auditor coordination, and continuous compliance monitoring. Maintain an audit-ready environment by developing and documenting security policies, procedures, risk assessments, controls, and evidence repositories. Partner with business and technology stakeholders to ensure security, availability, confidentiality, and change-management controls are consistently implemented and maintained. Administer and optimize Microsoft Sentinel, including security monitoring, analytics rules, alerting, dashboards, and automated workflows. Monitor and investigate threats identified through Microsoft Defender, Sentinel, AWS security services, and other security platforms. Lead security incident response activities, including investigation, containment, remediation, recovery, and coordination of forensic activities when required. Conduct threat hunting, vulnerability management, security assessments, penetration testing support, tabletop exercises, and disaster recovery testing. Design, implement, and maintain secure Microsoft Azure environments using services and capabilities such as Entra ID, Conditional Access, Privileged Identity Management, Defender for Cloud, Microsoft Purview, and related security technologies. Secure AWS environments through appropriate implementation and management of IAM, CloudTrail, GuardDuty, Security Hub, Config, CloudWatch, and other security controls. Apply zero-trust principles across cloud, identity, infrastructure, and endpoint environments. Maintain and support hybrid infrastructure spanning Azure, AWS, Active Directory, Entra ID, Windows Server, virtualization platforms, Microsoft 365, networks, and security appliances. Design and maintain high-availability and disaster recovery solutions while supporting cloud migrations and infrastructure modernization initiatives. Manage identity lifecycles, privileged access, periodic access reviews, and related security controls. Develop security automation using PowerShell, Azure Automation, Logic Apps, and Sentinel SOAR capabilities. Create executive and operational cybersecurity dashboards and metrics to track security performance, vulnerabilities, incidents, compliance, and operational efficiency. Identify opportunities to improve security processes, automate repetitive activities, strengthen controls, and increase operational efficiency. Participate in an on-call rotation supporting critical security incidents and infrastructure issues. Requirements: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field is preferred. 3–5+ years of experience in cybersecurity and infrastructure engineering. 3+ years of experience managing and securing Microsoft Azure environments. 2+ years of experience administering Microsoft Sentinel or a comparable SIEM platform. Demonstrated experience supporting SOC 2 Type II audits and maintaining security and compliance controls. Experience securing AWS cloud environments and working across multi-cloud or hybrid infrastructure. Practical experience with incident response, vulnerability management, security monitoring, and threat investigation. Strong knowledge of Microsoft Azure, Microsoft Sentinel, Microsoft Defender technologies, Microsoft Entra ID, Active Directory, and Microsoft 365 security. Experience with AWS security services, PowerShell scripting, vulnerability management platforms, SIEM operations, network security, and firewall administration. Understanding of identity and access management, privileged access controls, zero-trust principles, and cloud security architecture. Experience with security automation and SOAR technologies is highly valued. Familiarity with Microsoft Purview, Defender XDR, Intune, DLP technologies, Terraform, and Infrastructure as Code is preferred. Strong troubleshooting, analytical, problem-solving, and incident-management skills. Excellent communication and collaboration skills, with the ability to work effectively across technical and non-technical teams. Ability to work independently in a fully remote environment and manage priorities in a fast-moving technology organization. One or more relevant certifications are preferred, including Microsoft SC-100, SC-200, SC-300, AZ-500, AZ-104, AWS Certified Security – Specialty, CISSP, CISM, GIAC certifications, or Security+. Benefits: ₹2,000,000–₹2,500,000 INR annual compensation, depending on experience and relevant certifications. Fully remote, work-from-home position based in India. Opportunity to work across cybersecurity, cloud infrastructure, compliance, automation, and security engineering. Hands-on exposure to Microsoft Azure, AWS, Microsoft Sentinel, Microsoft Defender, Microsoft 365, and modern security technologies. Opportunity to play a key role in strengthening SOC 2 Type II compliance and enterprise cyber resilience. Exposure to cloud modernization, zero-trust security, security automation, and infrastructure engineering initiatives. Opportunity to contribute to security strategy and operational improvements in a growing, digitally enabled organization. Participation in an on-call rotation for critical security incidents and infrastructure support. How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1 This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security & Infrastructure Engineer based in India. This is a hands-on cybersecurity and infrastructure engineering role focused on protecting and modernizing hybrid cloud environments. You will combine security operations, cloud engineering, infrastructure administration, compliance, and incident response to strengthen the organization’s overall cyber resilience. The role provides broad exposure to Microsoft Azure, AWS, Microsoft Sentinel, Microsoft 365, Entra ID, endpoint security, networking, and modern security platforms. You will play a central role in maintaining SOC 2 Type II readiness, improving security controls, and supporting audit and risk management activities. You will also use automation and emerging technologies to make security operations more efficient and scalable. This is an ideal opportunity for an engineer who wants to have a meaningful impact while helping build a mature, secure, and audit-ready technology environment.