Security Engineer 2

Digantara is a leading Space Surveillance and Intelligence company focused on ensuring orbital safety and sustainability. With expertise in space-based detection, tracking, identification, and monitoring, Digantara provides comprehensive domain awareness across all regimes, enabling end-users to gain actionable intelligence on a single platform. At the core of its infrastructure lies a sophisticated integration of hardware and software capabilities aligned with the key principles of situational awareness: perception (data collection), comprehension (data processing), and prediction (analytics). This holistic approach empowers Digantara to monitor all Resident Space Objects (RSOs) in orbit, fostering comprehensive domain awareness.

Why Us?

• Be part of a collaborative and innovative environment where your ideas and skills make a real difference to the entire space realm.

• Push the boundaries with hands-on experience, greater responsibilities, and rapid career advancement.

• Competitive incentives, galvanising workspace, blazing team—pretty much everything you have heard about a startup.

Ideal Candidate:

• The Security Engineer 2 is a mid-level (L2) engineer who owns IT security governance, ISO and SOC 2 audit readiness, network security, AWS cloud security and product security.

Responsibilities:

IT security and GRC:

•     Maintain the security policy set, risk register and control mapping, and run policy rollout and user acceptance.

•     Run risk assessments and track treatment actions to closure.

•     Review the security of vendors and third parties before they are onboarded.

•     Review Microsoft 365, Entra ID and email security configuration against the security baseline.

ISO and SOC 2 audit readiness:

•     Own the readiness plan: scoping, control owners, evidence collection and internal audits.

•     Coordinate with external auditors, prepare for audits and drive remediation of findings.

•     Define security requirements for IT controls, and check that IT controls produce the evidence auditors need.

Cloud security (AWS):

•     Review AWS accounts for risky configuration across IAM, network exposure, logging, encryption and storage access.

•     Define and enforce account guardrails and baseline configurations, and monitor cloud security posture.

•     Review infrastructure-as-code and architecture changes for security before release.

Network security:

•     Review firewall, VPN and segmentation design and rule changes for security.

•     Review Wi-Fi and remote access security, and make sure findings from network audits are fixed.

•     Define network security requirements and monitoring, working with IT & Network Ops, who run the network.

Product security:

•     Build security into the development lifecycle through threat modeling and secure design reviews.

•     Run and triage static analysis, dependency and secrets scanning, and track fixes with engineering teams.

•     Coordinate penetration tests and handle vulnerability reports against company products.

Operations and awareness:

•     Support vulnerability management and incident response with the Enterprise Security Engineer.

•     Run phishing exercises and security awareness sessions.

•     Help define and enforce security controls for AI tools, including access, data handling and connector permissions.

Qualifications:

•     3 to 6 years of experience in security engineering, GRC, network, cloud or product security

•  Hands-on experience with ISO and SOC 2: implementing controls, collecting evidence and supporting internal or external audits.

•     Practical AWS security experience: IAM, VPC networking, logging, encryption and key management, and native security services.

•     Working knowledge of network security: firewalls, VPNs, segmentation and secure Wi-Fi.

•     Application security experience: secure development lifecycle, threat modeling, static analysis, and dependency and secrets scanning.

•     Experience writing policies, risk assessments and procedures that teams actually follow.

•     Scripting (Python or Bash) and familiarity with infrastructure-as-code such as Terraform or CloudFormation.

•     Strong written and spoken communication, including explaining risk to non-technical staff.

Bachelor's degree in computer science, information technology or a related field, or equivalent experience

Preferred Qualities:

•     Certifications such as AWS Security Specialty, CISSP, CISM, CCSP, or ISO 27001 Lead Implementer or Auditor.

•     Experience with enterprise firewall and VPN platforms.

•     Experience with a compliance automation platform such as Sprinto.

•     Experience securing containers, Kubernetes and CI/CD pipelines.

•     Understanding of endpoint management, EDR and CASB from a requirements and audit-evidence point of view.

•     Familiarity with Microsoft 365 and Entra ID security configuration.

•     Experience writing usage and security policies for AI tools.

Job Location: Hebbal, Bengaluru(5Days Office setup)