Security Engineer

Role: Security Engineer

Location: Gurugram, Haryana, India

Workplace type: Hybrid i.e. 6 days a week (2-3 days per week in-office, rest remote)

About the Role

We are looking for a hands-on Security Engineer to own our security and compliance initiatives while partnering closely with engineering teams to strengthen the security of our products and infrastructure.

Experience working in LegalTech, compliance, finance, healthcare, or another domain involving sensitive and complex data is highly preferred.

Responsibilities

• Own and maintain SOC 2 and related security compliance programs.
• Coordinate external audits and manage evidence collection and remediation.
• Conduct security reviews of application code, infrastructure, and system architecture.
• Partner with developers to resolve vulnerabilities and improve secure coding practices.
• Implement and maintain security tooling across CI/CD pipelines and cloud environments.
• Perform risk assessments, incident investigations, and security awareness activities.
• Develop clear security policies, controls, and internal documentation.

Requirements

• 2+ years of experience in application, cloud, or product security.
• Practical knowledge of SOC 2 controls and audit processes.
• Ability to review code and communicate security risks to developers.
• Familiarity with vulnerability management, threat modelling, and secure SDLC practices.
• Strong ownership, communication, and cross-functional collaboration skills.

The ideal candidate is proactive, pragmatic, and capable of balancing security, compliance, and business needs.