Information Security Engineer

What We're Looking For :We are looking for someone who has built security capabilities at scale, not someone who has only administered security frameworks.- 12+ years of experience in information/cyber security, with significant experience leading security for a large-scale digital, fintech, technology or consumer business.- Has built a security function from 0- 1 or transformed one during a period of rapid scale- Has worked in high-sensitivity environments such as fintech, payments, banking, digital identity, large consumer technology or other critical digital infrastructure.- Has operated at a large consumer scale, ideally having secured a product or platform with millions of users, transactions or sensitive data flows.- Strong understanding of cloud-native security, API security, distributed systems, identity and access management, data security, application security and network security.- Deep understanding of the modern cyber-threat landscape, including supply-chain attacks, API abuse, identity attacks, ransomware, cloud vulnerabilities, data exfiltration and attacks across interconnected ecosystems.- Demonstrated understanding of AI security and the emerging agentic threat landscape, including risks arising from autonomous agents, model/data access, identity, permissions and machine-to-machine interactions.- Has experience building security-by-design / DevSecOps practices in high-velocity engineering organisations.- Has led major security incidents or crisis situations and understands what it takes to protect and recover a business when things go wrong.- Strong understanding of ISO 27001, DPDP Act, IT Act, CERT-In requirements and other relevant regulatory frameworks.- Relevant certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer are useful, but demonstrated capability matters more than certifications. (ref:hirist.tech)