Information Security Engineer

ABOUT BUREAU Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally. Bureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond. WHY BUREAU? Bureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real. We hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates—keep reading. ABOUT THE ROLE - INFORMATION SECURITY ENGINEER We are looking for a Security Engineer who can own both the hands-on technical security stack and our governance/compliance programs. What you’ll be doing In this role, you will: * Harden and monitor our cloud & container infrastructure (AWS/EKS, endpoints, network). * Run vulnerability management, security tooling and incident response. * Help maintain our ISMS and support audits (ISO 27001, SOC 2, RBI, DPDP, etc.). This is ideal for someone who doesn’t want to be only “checklist GRC” or only “pure blue-team”, but wants a blended role across security engineering + GRC.Key Responsibilities 1. Cloud & Infrastructure Security (Hands-on) * Work with DevOps to secure our AWS/EKS environment: * IAM hardening, security groups, VPC, KMS, S3, RDS, etc. * Review infra-as-code (Terraform/Helm) for security issues and misconfigurations. * Own or co-own key security tools: * Endpoint / EDR (e.g., CrowdStrike / SentinelOne), * Cloud security (CSPM / CNAPP, GuardDuty, Security Hub, WAF, etc.), * Container / runtime security where applicable. * Implement and maintain logging & monitoring for security events (CloudTrail, ALB/NLB logs, K8s logs, etc.), and integrate them with SIEM / alerting. 2. Vulnerability Management & Security Operations * Own the vulnerability management lifecycle: * Run periodic scans for cloud, endpoints, containers and apps. * Triage findings, prioritise based on risk, and drive closure with engineering. * Coordinate external pentests / bug bounties and track remediation. * Support incident response: * Help investigate alerts, gather evidence, and contribute to RCA and CAPA. * Maintain and update incident runbooks. 3. Governance, Risk & Compliance (ISMS, Audits, DPDP) * Maintain and enhance the Information Security Management System (ISMS): * Policies, procedures, SoA, risk register, control evidence and audit trails. * Support internal and external audits: ISO 27001, SOC 2, RBI/CERT-In, Data Protection. * Prepare and manage audit evidence, observations, closure reports and certification documentation. * Assist with risk assessments: * Maintain the risk register, risk treatment plans and residual risk reviews. * Conduct vendor security due diligence and maintain vendor security records (MSA, NDA, DPA, DPIA, etc.). * Support privacy & regulatory compliance operations (GDPR/DPDP basics: retention, consent, grievance logging). 4. Access, Asset & Control Assurance * Participate in and help automate access reviews, asset inventory checks, and configuration compliance checks. * Track control performance (vuln SLAs, access reviews, backup tests, etc.) and ensure gaps are documented and closed. * Maintain security awareness and training trackers (onboarding, annual refreshers, phishing simulations). What You’ll Bring * Bachelor’s degree in Computer Science, IT, Cybersecurity or related discipline. * ~4 years of experience in security engineering, cloud security, or GRC/compliance (any mix, but must be comfortable hands-on). * Good understanding of: * Security engineering fundamentals: Linux, networking, IAM, encryption, least privilege. * Cloud platforms (AWS preferred; GCP/Azure a plus) and their security services. * Core frameworks: ISO 27001, SOC 2, basic risk management and audit lifecycle. * Comfortable with: * Writing/debugging basic scripts (Bash/Python) for automation and data extraction. * Tools like Jira, Confluence, Excel/Sheets and at least one GRC / security platform (e.g., Scrut/Drata/Secureframe, etc.). * Strong documentation skills and ability to talk to both engineers and non-technical stakeholders. Preferred (Good to Have) / Willing to Learn * Cloud security certifications (e.g., AWS Security / AWS Cloud Practitioner). * ISO 27001:2022 Lead Auditor/Implementer, CompTIA Security+, ISC2 CC. * Experience with: * EDR/XDR tools, * CSPM/CNAPP (e.g., Wiz, Prisma, Defender for Cloud), * SIEM, WAF, runtime/container security (Falco, etc.). * Exposure to GDPR/DPDP or other data protection regimes. Who You Are * You enjoy both: * Getting your hands dirty in logs, configs and cloud consoles, and * Keeping things clean in policies, risk registers and audit trackers. * You’re structured and process-oriented, but still pragmatic and capable of shipping improvements. * You’re comfortable collaborating with DevOps, backend, data, HR and legal to get security actually implemented, not just written down. * You want to grow into either Security Engineering leadership (owning tools/architecture) or GRC leadership (owning audits and certifications) over the next few years. OUR CULTURE * We hire self-motivated people and get out of their way * We value performance, not hours worked * Speed, ownership, and impact matter most COMPENSATION * Competitive salary + potential equity * Health benefits, flexible PTO, learning budget

The information security team is responsible for protecting IMC’s intellectual property, IT infrastructure and business operations against external and internal threats. We work closely with technology, risk, compliance, internal audit and business leaders to reduce cyber risk to acceptable levels. We are looking for an Information Security Engineer to grow and mature our Security Operations Center function that uses EDR, SIEM, SOAR, CSPM, IAM, firewalls, NIDS/NIPS and various other security controls. We offer an environment that allows you to broaden and deepen your information security knowledge and skills, with access to advanced security technology, frequent training and a culture of knowledge sharing. As you gain experience with our existing SOC technology and processes, you will be given a lot of freedom to further mature the SOC with your own initiatives. Your Core Responsibilities: * Analyse security logs, alerts and reported events. Respond to or assist with the remediation of incidents * Using various threat intelligence sources, hunt for potential compromise across the infrastructure * Report discovered vulnerabilities to technology owners and suggest remediation steps * Support and improve technical security controls * Leverage automation and orchestration solutions to automate repetitive tasks * Leverage AI-assisted tooling to enhance alert triage, event summarisation, and investigation workflows, with a pragmatic view of its limitations * Develop reporting for assessing the effectiveness of security controls * Develop and improve incident response playbooks  Your Skills and Experience: * Relevant tertiary and/or security qualifications with previous SOC experience and/or 3+ years of hands-on experience in an enterprise IT environment, managing endpoints and applications on-prem or in the cloud * Strong analytical and problem-solving skills * Self-starter and a passion for cybersecurity * Exposure to security controls like identity and access management, vulnerability management, endpoint detection and response * Automation using basic coding skills or low code / no code automation tools * Awareness of AI and machine learning applications in security operations is a plus; any hands-on experience with AI-assisted security tooling or LLM-based workflows is highly regarded. * Understanding of common attack techniques and frameworks such as MITRE ATT&CK About Us IMC is a global trading firm powered by a cutting-edge research environment and a world-class technology backbone. Since 1989, we’ve been a stabilizing force in financial markets, providing essential liquidity upon which market participants depend. Across our offices in the US, Europe, Asia Pacific, and India, our talented quant researchers, engineers, traders, and business operations professionals are united by our uniquely collaborative, high-performance culture, and our commitment to giving back. From entering dynamic new markets to embracing disruptive technologies, and from developing an innovative research environment to diversifying our trading strategies, we dare to continuously innovate and collaborate to succeed.