Information Security Engineer

📋 Job Overview

Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally. Bureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond.

🏢 About Bureau

Bureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real. We hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates—keep reading.

🎯 The Role

We are looking for a Security Engineer who can own both the hands-on technical security stack and our governance/compliance programs.

✅ Key Responsibilities

• Harden and monitor our cloud & container infrastructure (AWS/EKS, endpoints, network).
• Run vulnerability management, security tooling and incident response.
• Help maintain our ISMS and support audits (ISO 27001, SOC 2, RBI, DPDP, etc.).

📌 Required Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity or related discipline.
• ~4 years of experience in security engineering, cloud security, or GRC/compliance (any mix, but must be comfortable hands-on).
• Good understanding of security engineering fundamentals: Linux, networking, IAM, encryption, least privilege.
• Cloud platforms (AWS preferred; GCP/Azure a plus) and their security services.
• Core frameworks: ISO 27001, SOC 2, basic risk management and audit lifecycle.
• Comfortable with writing/debugging basic scripts (Bash/Python) for automation and data extraction.
• Tools like Jira, Confluence, Excel/Sheets and at least one GRC / security platform (e.g., Scrut/Drata/Secureframe, etc.).
• Strong documentation skills and ability to talk to both engineers and non-technical stakeholders.

⭐ Desirable Experience

• Cloud security certifications (e.g., AWS Security / AWS Cloud Practitioner).
• ISO 27001:2022 Lead Auditor/Implementer, CompTIA Security+, ISC2 CC.
• Experience with EDR/XDR tools, CSPM/CNAPP (e.g., Wiz, Prisma, Defender for Cloud), SIEM, WAF, runtime/container security (Falco, etc.).
• Exposure to GDPR/DPDP or other data protection regimes.

🎁 Benefits

Competitive salary + potential equity, Health benefits, flexible PTO, learning budget

🛂 Visa & Eligibility

No specific visa or eligibility information provided.