Information Security Engineer

About the role

Bureau is building a unified risk decisioning platform used by banks, fintechs and retailers worldwide. The Information Security Engineer will own both hands‑on security engineering for cloud and container environments and the governance/compliance programs that keep the platform trusted.

Key responsibilities

• Secure the AWS/EKS environment – IAM hardening, VPC design, KMS, S3, RDS, and review Terraform/Helm code for misconfigurations.
• Operate and tune security tooling – endpoint/EDR (CrowdStrike/SentinelOne), CSPM/CNAPP, GuardDuty, Security Hub, WAF, and integrate logs with a SIEM.
• Run vulnerability management across cloud, containers and endpoints, triage findings, coordinate pentests and maintain incident runbooks.
• Maintain the ISMS, support ISO 27001, SOC 2, RBI and DPDP audits, and manage risk registers, vendor security due‑diligence and privacy compliance.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related field.
• ~4 years of experience in security engineering, cloud security or GRC/compliance, with a hands‑on mindset.
• Strong documentation skills and ability to communicate with engineers, legal and business stakeholders.

Required skills

• AWS (IAM, VPC, KMS, S3, RDS, GuardDuty, Security Hub, WAF)
• Kubernetes/EKS, Terraform, Helm
• Endpoint/EDR tools (CrowdStrike, SentinelOne)
• CSPM/CNAPP solutions (e.g., Wiz, Prisma)
• SIEM integration, CloudTrail, ALB/NLB logs
• Scripting in Bash and Python
• Jira, Confluence, Excel/Sheets

What we offer

• Competitive salary with potential equity participation.
• Health benefits, flexible paid time off and a learning budget.