Information Security Engineer

About the Company

Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Powered by a 1 billion+ identity knowledge graph, Bureau helps over 150 banks, fintechs, and retailers verify identities and stop fraud globally.

Responsibilities

• Harden and monitor cloud and container infrastructure including AWS, EKS, endpoints, and networks
• Review infrastructure-as-code such as Terraform and Helm for security misconfigurations
• Own security tooling including EDR, CSPM, CNAPP, and WAF
• Implement logging and monitoring for security events and integrate with SIEM
• Manage the vulnerability management lifecycle, including scanning and triage
• Coordinate external pentests and bug bounties
• Maintain the Information Security Management System (ISMS) and support audits like ISO 27001 and SOC 2
• Conduct vendor security due diligence and risk assessments
• Support privacy and regulatory compliance operations such as GDPR and DPDP
• Automate access reviews and asset inventory checks

Requirements

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related discipline
• Approximately 4 years of experience in security engineering, cloud security, or GRC
• Strong understanding of Linux, networking, IAM, and encryption
• Proficiency with AWS security services
• Knowledge of ISO 27001 and SOC 2 frameworks
• Ability to write or debug basic scripts in Bash or Python
• Experience with Jira, Confluence, and GRC platforms
• Strong documentation and communication skills

Preferred Qualifications

• Cloud security certifications such as AWS Security or AWS Cloud Practitioner
• ISO 27001 Lead Auditor/Implementer, CompTIA Security+, or ISC2 CC
• Experience with EDR/XDR, CSPM/CNAPP (Wiz, Prisma), or SIEM tools
• Exposure to GDPR, DPDP, or other data protection regimes