Security Engineer

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

IT Systems Engineer

Location: Bengaluru, India · On-site | Experience: 5+ years in IT systems / infrastructure

Department: IT & Information Security | Employment Type: Full-time | Reports To: Engineering Leadership

Focus: Own the identity, endpoints, network, and compliance backbone that powers immersive technology at

scale.

The Mission

About Metadome.ai

Metadome.ai is an immersive 3D & XR technology company that enables cloud-based, photorealistic, and captivating customer experiences for brands. Our technology offers a complete stack for creating immersive 3D & XR applications with omni-channe deployment across both in-store and digital touchpoints, and over a multitude of devices. These experiences span a spectrum of use cases across the automotive, home décor, fashion, and cosmetics & accessories sectors. Our flagship automotive platform — Autodome — enables unprecedented photorealistic, cloud-based immersive 3D & XR applications that cover the entire pre-retail funnel, empowering brands to launch products virtually and drive awareness, engagement, and bookings among modern automotive consumers. Today, we are trusted partners to leading brands across the globe — including Unilever, MG Motor, Lexus, Asian Paints, Tata Motors, and Royal Enfield, among others. We have also partnered with the likes of TCS, SAP , and PwC, and are an active voice in the XR community, including the

Metaverse Standards Forum and the VR/AR Association.

About the Role

We are looking for a hands-on IT Systems Engineer to own and run the technology backbone that keeps our teams productive and our data secure. You will be the single point of accountability for IT operations and information security across a multi-location business where 24x7 systems availability is core to how we operate — managing identity, endpoints, network, and our cloud workspace, while operating and continuously hardening our GDPR, SOC 2, and ISO 27001 compliance posture.

This is a builder-operator role, not a supervisory one. We run a tight ship on security and compliance, and we expect you to have personally implemented and operated the systems and controls described below — you should know them inside out, down to the configuration, the evidence, and the edge cases.

Core Responsibilities

● Identity & Access Management — JumpCloud:

○ Own the JumpCloud directory end-to-end: user lifecycle (joiner / mover / leaver), groups, and organizational structure.

○ Administer SSO, enforce MFA, and configure conditional and device-based access policies across all SaaS applications.

○ Manage cross-platform device policies (macOS, Windows, Linux) via JumpCloud device management, including disk encryption and compliance baselines.

○ Integrate RADIUS / LDAP for Wi-Fi and application authentication.

○ Automate onboarding and offboarding to guarantee least-privilege access and clean, auditable deprovisioning.

● Google Workspace Administration — GWS:

○ Administer the Google Workspace tenant: users, groups, organizational units, and email routing.

○ Configure and enforce security controls — 2-Step Verification, context-aware access, DLP rules,

and sharing / visibility policies.○

○ Manage retention, eDiscovery, and legal holds through Google Vault. Optimize licensing and SaaS spend across Workspace and other portals.

Endpoint & Threat Protection — Sophos:

○ Deploy, configure, and manage Sophos Central (Intercept X / XDR) across all endpoints and

servers.

○ Monitor alerts, triage threats, and lead incident detection, response, and remediation.

○ Maintain endpoint encryption, web / application control, and device-hardening standards.

○ Where Sophos Firewall is in use, manage firewall policies, IPS, and secure remote access.

Network, Firewall & Wi-Fi:

○ Design, configure, and maintain firewalls, VLAN segmentation, VPN, and secure remote access.

○ Administer enterprise Wi-Fi and wired networks (switches, access points), including

RADIUS-backed authentication.

○ Manage LAN / WAN connectivity, ISP relationships, and network performance and uptime.

○ Implement network monitoring, intrusion detection, and centralized logging.

Hardware, Software & Asset Management:

○ Own the full hardware lifecycle — procurement, provisioning / imaging, maintenance, repair, and

decommissioning.

○ Support a mixed fleet of macOS, Windows, and Android devices, including high-performance workstations and XR / VR hardware used by our creative and engineering teams.

○ Maintain an accurate hardware and software inventory and asset register.

○ Manage software deployment, patch management, and license compliance.

Security, Risk & Compliance — GDPR · SOC 2 · ISO 27001:

○ Operate and continuously improve the company's Information Security Management System

(ISMS).

○ Own day-to-day compliance for GDPR, SOC 2 (Type II), and ISO/IEC 27001 — including control

implementation, evidence collection, and continuous monitoring.

○ Conduct risk assessments, internal audits, periodic access reviews, and vendor security / DPA

assessments.

○ Serve as a primary point of contact during external audits and customer security reviews.

○ Maintain security policies, records of processing (RoPA), DPIAs, and incident / breach-response

runbooks.

○ Drive security-awareness and phishing-simulation programs across the organization.

IT Operations & Support:

○ Ensure 24x7 high availability of core systems and meet defined uptime and SLA metrics.

○ Provide escalation-level troubleshooting and support across macOS, Windows, and Android.

○ Manage backups, disaster recovery, and business-continuity testing.

○ Coordinate internal teams and third-party vendors to deliver IT projects on time and within

budget.

○ Maintain documentation, runbooks, and standard operating procedures.

○ Own and report on the IT budget and asset allocation.

Required Skills & Experience

● 5+ years in IT systems / infrastructure engineering — with direct, hands-on ownership of the systems

below rather than purely supervisory exposure.

● JumpCloud — demonstrated hands-on expertise across identity, SSO, MFA, and device management.

● Google Workspace (GWS) — deep admin-console experience including security, DLP , and Vault.

● Sophos — hands-on endpoint / XDR administration and threat response.

● Networking — firewall configuration, Wi-Fi, VLANs, VPN, LAN / WAN, and RADIUS / LDAP fundamentals.

● GDPR, SOC 2 & ISO 27001 — hands-on — you have personally taken an organization through at least one

full audit / certification cycle and know the controls, evidence, and auditor expectations inside out.

Cross-platform support — proven troubleshooting across macOS, Windows, and Android in a 24x7, multi-location environment.

System security — solid grasp of IDS / IPS, endpoint hardening, encryption, and backup / recovery.

Education — B.Sc. / B.Tech in Information Technology, Computer Science, or a related discipline.

Mindset — strong documentation discipline, ownership, resourcefulness, and a structured, problem-solving approach.

Preferred Qualifications

●Relevant certifications — e.g., ISO 27001 Lead Implementer / Auditor, CompTIA Security+ / Network+, or vendor certifications from JumpCloud and Sophos.

●Experience with compliance-automation platforms such as Sprinto, Vanta, or Drata.

●Scripting and automation for IT operations (Bash, PowerShell, or Python).

●Experience in a fast-paced SaaS or technology company serving enterprise and global clients.

●Familiarity with supporting creative, 3D, or XR workflows and high-performance computing environments.

Why Join Us

You will own the systems and security posture of a company building category-defining immersive technology for some of the world's most recognizable brands. It is a high-trust, high-ownership role with the autonomy to design things properly — and the visibility that comes with keeping a security- and compliance-first business running

flawlessly.

Hello,

Greetings for the day !!!

We are hiring "Security Engineer L2 - Netskope" for one of our client based at Navi Mumbai !!!

Location: Ghansoli

Designation: Security Engineer L2 (Netskope)

Job Description:

Design and implement Netskope SSE/SASE solutions.

• Configure and manage Netskope policies, traffic steering, SSL/TLS inspection, and cloud security controls.
• Deploy and support Netskope Client on Windows, macOS, and mobile devices.

Implement and manage:

• CASB (Cloud Access Security Broker)
• SWG (Secure Web Gateway)
• DLP (Data Loss Prevention)
• ZTNA (Zero Trust Network Access)
• Cloud Firewall and DNS Security
• Monitor security incidents and investigate security alerts.
• Integrate Netskope with identity providers such as Microsoft Entra ID (Azure AD), Okta, and Active Directory.
• Perform troubleshooting, policy tuning, and performance optimization.
• Prepare security reports, documentation, and standard operating procedures.

Required Skills:

• Netskope SSE/SASE Platform
• CASB, SWG, DLP, ZTNA
• Network Security and Cloud Security
• HTTP/HTTPS, DNS, VPN, Proxy technologies

Experience: 3+ years

Working days: Monday to Friday

**LOOKING FOR IMMEDIATE JOINERS ONLY**