Information Security Engineer

About the Role

The role is based in India, with a night shift schedule, and the company is proud to be an equal opportunity employer, celebrating diversity and promoting an inclusive environment. The successful candidate will be working in a collaborative and dynamic environment, with opportunities for growth and professional development.

In this role, the engineer will be working closely with the Information Security Manager to identify and mitigate potential security risks, ensuring the integrity of Sphera's systems and data. The company is committed to creating a safer, more sustainable, and productive world, and the Information Security Engineer will play a vital part in achieving this mission.

What You Will Do

• Perform full-cycle incident investigation and response, ensuring timely and effective resolution of security incidents
• Assist in maintaining Security Operations Center (SOC) tools, such as SIEM and NGAV/XDR, to monitor and analyze security threats
• Execute information security projects and initiatives to enhance cybersecurity posture and mitigate risk
• Perform threat hunting and other proactive monitoring to identify potential security threats
• Automate security processes, tasks, and reports to improve efficiency and effectiveness
• Support gathering core information security metrics to inform security decisions
• Collaborate with the team to develop and implement security policies and procedures
• Participate in incident response activities outside of regular working hours, as required
• Communicate effectively with stakeholders, both verbally and in writing, to ensure seamless incident response and security operations

What We Are Looking For

• Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, or another related field
• Proficiency in common security tools, such as SIEM, NGAV/XDR, firewalls, and email security
• Advanced understanding of security investigation procedures and core information security concepts, especially endpoint security and network security
• Ability to assess and control for information security risks
• Ability to read and understand application/script code, as well as develop scripts and perform automation
• Strong communication and collaboration skills, with the ability to foster a collaborative relationship with colleagues
• Ability to prioritize tasks, projects, and other responsibilities, with a willingness to learn and grow skills
• Industry-recognized certification, such as CISSP, CISA, CISM, or equivalent, is desirable
• Experience working in a 24/7 security operations environment, with a strong understanding of incident response and threat analysis

Nice to Have

• Experience with cloud security platforms, such as AWS or Azure
• Knowledge of compliance frameworks, such as ISO 27001 or NIST
• Familiarity with security orchestration, automation, and response (SOAR) tools
• Experience with threat intelligence platforms and threat hunting techniques
• Certification in a related field, such as CompTIA Security+ or CISSP

Benefits and Perks

• Competitive salary and benefits package
• Opportunity to work with a leading company in the ESG space
• Collaborative and dynamic work environment, with a strong focus on diversity and inclusion
• Professional development opportunities, with a willingness to support ongoing education and training
• Remote work arrangement, with flexible working hours and a night shift schedule
• Access to cutting-edge security tools and technologies, with ongoing support and training
• Recognition and reward for outstanding performance, with opportunities for career advancement
• Comprehensive health and wellness program, with a focus on employee well-being

• When applying, make sure to highlight your experience with security tools and technologies, such as SIEM and NGAV/XDR, and be prepared to provide examples of your incident response skills.
• To stand out, consider including a portfolio of your work, such as security project reports or incident response plans, to demonstrate your expertise and skills.
• Be prepared to discuss your understanding of compliance frameworks and security regulations, such as ISO 27001 or NIST, and how you have applied them in previous roles.
• Emphasize your ability to work independently and collaboratively in a global team, with a strong focus on communication and problem-solving skills.
• Don't be afraid to ask about the company culture and values, and how they support employee well-being and professional development.
• When negotiating salary, consider the cost of living in India and the company's overall compensation package, and be prepared to provide evidence of your skills and experience to support your request.
• Be wary of any red flags, such as a lack of transparency about the company's security practices or a focus on overtime work without adequate compensation