Digantara is a leading Space Surveillance and Intelligence company focused on ensuring orbital safety and sustainability. With expertise in space-based detection, tracking, identification, and monitoring, Digantara provides comprehensive domain awareness across all regimes, enabling end-users to gain actionable intelligence on a single platform. At the core of its infrastructure lies a sophisticated integration of hardware and software capabilities aligned with the key principles of situational awareness: perception (data collection), comprehension (data processing), and prediction (analytics). This holistic approach empowers Digantara to monitor all Resident Space Objects (RSOs) in orbit, fostering comprehensive domain awareness.
Why Us?Be part of a collaborative and innovative environment where your ideas and skills make a real difference to the entire space realm.
Push the boundaries with hands-on experience, greater responsibilities, and rapid career advancement.
Competitive incentives, galvanising workspace, blazing team—pretty much everything you have heard about a startup.
The Security Engineer 2 is a mid-level (L2) engineer who owns IT security governance, ISO and SOC 2 audit readiness, network security, AWS cloud security and product security.
IT security and GRC:
• Maintain the security policy set, risk register and control mapping, and run policy rollout and user acceptance.
• Run risk assessments and track treatment actions to closure.
• Review the security of vendors and third parties before they are onboarded.
• Review Microsoft 365, Entra ID and email security configuration against the security baseline.
ISO and SOC 2 audit readiness:
• Own the readiness plan: scoping, control owners, evidence collection and internal audits.
• Coordinate with external auditors, prepare for audits and drive remediation of findings.
• Define security requirements for IT controls, and check that IT controls produce the evidence auditors need.
Cloud security (AWS):
• Review AWS accounts for risky configuration across IAM, network exposure, logging, encryption and storage access.
• Define and enforce account guardrails and baseline configurations, and monitor cloud security posture.
• Review infrastructure-as-code and architecture changes for security before release.
Network security:
• Review firewall, VPN and segmentation design and rule changes for security.
• Review Wi-Fi and remote access security, and make sure findings from network audits are fixed.
• Define network security requirements and monitoring, working with IT & Network Ops, who run the network.
Product security:
• Build security into the development lifecycle through threat modeling and secure design reviews.
• Run and triage static analysis, dependency and secrets scanning, and track fixes with engineering teams.
• Coordinate penetration tests and handle vulnerability reports against company products.
Operations and awareness:
• Support vulnerability management and incident response with the Enterprise Security Engineer.
• Run phishing exercises and security awareness sessions.
• Help define and enforce security controls for AI tools, including access, data handling and connector permissions.
Qualifications:• 3 to 6 years of experience in security engineering, GRC, network, cloud or product security
• Hands-on experience with ISO and SOC 2: implementing controls, collecting evidence and supporting internal or external audits.
• Practical AWS security experience: IAM, VPC networking, logging, encryption and key management, and native security services.
• Working knowledge of network security: firewalls, VPNs, segmentation and secure Wi-Fi.
• Application security experience: secure development lifecycle, threat modeling, static analysis, and dependency and secrets scanning.
• Experience writing policies, risk assessments and procedures that teams actually follow.
• Scripting (Python or Bash) and familiarity with infrastructure-as-code such as Terraform or CloudFormation.
• Strong written and spoken communication, including explaining risk to non-technical staff.
Bachelor's degree in computer science, information technology or a related field, or equivalent experience
Preferred Qualities:• Certifications such as AWS Security Specialty, CISSP, CISM, CCSP, or ISO 27001 Lead Implementer or Auditor.
• Experience with enterprise firewall and VPN platforms.
• Experience with a compliance automation platform such as Sprinto.
• Experience securing containers, Kubernetes and CI/CD pipelines.
• Understanding of endpoint management, EDR and CASB from a requirements and audit-evidence point of view.
• Familiarity with Microsoft 365 and Entra ID security configuration.
• Experience writing usage and security policies for AI tools.
Job Location: Hebbal, Bengaluru(5Days Office setup)Digantara Bengaluru, Karnataka, IND Office
Bengaluru, India
