Principal Information Security Engineer (Immediate Joiner)

About the role

A Principal Information Security Engineer is sought to lead the design, implementation and optimisation of enterprise-wide security solutions. The role calls for strong technical leadership and hands-on expertise across Microsoft Security, SIEM, DLP, PAM, Zero Trust, endpoint and cloud security, vulnerability management and DevSecOps. Immediate joiner.

Key responsibilities

• Design, implement and optimise enterprise security architectures and technical controls.
• Deploy and manage SIEM platforms such as IBM QRadar and Microsoft Sentinel, including log integration, detection engineering, analytics and automation.
• Implement Microsoft Security solutions: Defender XDR, Defender for Endpoint, Identity and Cloud, Intune, Purview and Entra ID.
• Lead DLP strategy, including data classification, policy development, incident investigation and compliance reporting.
• Manage PAM solutions: privileged account discovery, credential vaulting, password rotation, session monitoring, JIT access and access governance.
• Implement Zscaler ZIA and ZPA for secure internet access, ZTNA and cloud security enforcement.
• Strengthen identity, endpoint, application and access controls; enhance cloud security on Azure and AWS.
• Conduct vulnerability assessments, security and risk reviews, and remediation planning.
• Integrate security controls into CI/CD pipelines and drive DevSecOps and Secure SDLC practices.
• Perform security architecture assessments, infrastructure hardening and technical risk evaluations.
• Lead security engineering initiatives and support audits, compliance and vendor assessments.

Required profile

• Bachelor's or Master's degree in Information Security, Cybersecurity, Computer Science or a related discipline.
• 8-12+ years of experience in Information Security Engineering, Cybersecurity or Security Architecture.
• Proven track record of designing, implementing and managing enterprise security solutions.
• Strong hands-on experience with enterprise PAM, Zscaler secure access and Microsoft Security platforms.
• Demonstrated ability to lead complex security engineering initiatives.
• Excellent technical leadership, analytical, problem-solving and stakeholder management skills.

Required skills

• SIEM: IBM QRadar, Microsoft Sentinel, KQL, detection engineering
• Microsoft Security: Defender XDR, Defender for Endpoint, Intune, Purview, Entra ID
• DLP: Forcepoint DLP, Microsoft Purview, data classification
• PAM: CyberArk or equivalent, JIT/JEA, Active Directory hardening
• Zero Trust: Zscaler ZIA/ZPA, ZTNA, SWG, CASB
• Cloud security: Azure, AWS, CSPM
• Vulnerability management, VAPT, DevSecOps, CI/CD security