Sr Security Engineer

Join Kobie's India Tech Hub as a Sr Security Engineer. Kobie is a 35-year veteran of the loyalty industry, expanding its global footprint by establishing a Tech Hub in India.

The Security Engineering team focuses on building and maintaining a robust, enterprise-grade security posture across Kobie's cloud-native platforms, applications, and data ecosystems.

As a Security Engineer, you will design security controls, identify vulnerabilities, and partner with engineering and operations teams to deliver solutions that are innovative and resilient.

Responsibilities

• Design, implement, and maintain security controls across cloud infrastructure, applications, and network environments
• Conduct vulnerability assessments, penetration testing, and threat modeling to proactively identify and remediate security risks
• Monitor security events and alerts using SIEM tooling, investigating incidents and driving timely remediation
• Partner with Cloud Engineering, DevOps, and application teams to embed security best practices into CI/CD pipelines and infrastructure-as-code workflows
• Support the development and enforcement of security policies, standards, and compliance frameworks (e.g., SOC 2, NIST CSF, PCI-DSS)
• Lead or contribute to security incident response activities, including root cause analysis and post-incident reviews
• Implement and manage identity and access management (IAM) controls, including least-privilege enforcement, privileged access management, and conditional access policies
• Evaluate and manage third-party security tools and vendor risk assessments
• Drive automation of security operations broadly, including testing, compliance checks, threat detection, triage, and response workflows
• Maintain accurate and thorough security documentation
• Act as a security subject matter expert, advising engineering and product teams on secure design and coding practices
• Proactively track emerging threats, vulnerabilities, and industry trends to continuously strengthen Kobie's security posture
• Train and develop team members on security and compliance practices, tools, and frameworks

Requirements

• 5+ years of experience in information security, cybersecurity engineering, or a related technical discipline
• 3+ years of hands-on experience securing cloud environments (AWS preferred)
• Experience with SIEM platforms and security event monitoring, alerting, and incident response workflows
• Proficiency in vulnerability management tools and processes
• Solid understanding of network security concepts
• Experience with identity and access management
• Hands-on experience integrating security into CI/CD pipelines (DevSecOps)
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF v2.0, PCI-DSS
• Working knowledge of data privacy regulations and their operational security implications
• Hands-on experience implementing and managing conditional access policies, network and host-based DLP, information protection classifications, and endpoint security controls
• Scripting or automation experience (Python, Bash, or similar)
• Strong Linux administration skills
• Excellent analytical and problem-solving skills
• Strong written and verbal communication skills