LotusFlare, Inc.

Security Compliance Engineer

Infrastructure Engineering - Pune, India - Full Time

LotusFlare has always been about making an impact through software products and changing industries for the better by simplifying technology so as to simplify customer experience. Founded by the team that helped Facebook reach over one billion mobile users, LotusFlare was born out of a vision to make the mobile internet accessible and affordable to people in parts of the world who often did not have access.
From this initial work, LotusFlare’s mission now is to design, build and continuously advance a cloud-native digital commerce and monetization platform that simplifies technology and customer experience to deliver valuable outcomes to enterprises. This platform provides the software product foundation for the company’s main offering, the LotusFlare Digital Network Operator® Cloud. LotusFlare DNO™ Cloud is a digital commerce and monetization managed service that serves as a digital BSS to deliver valuable business outcomes for communications and media services providers.
As Security Engineer on the Infrastructure Team at LotusFlare you will be responsible to drive the overall IT security standards across our cloud native DNO stack. This incorporates security policies and domain security concepts along with the implementation and the lifecycle of security technologies in LotusFlare’s infrastructure.
As a Security Engineer you will be reporting to the lead and engage directly with infrastructure and product engineering teams.The Security Compliance engineer plays a crucial role in ensuring our organization's adherence to internal security policies, industry regulations, and legal requirements. This individual will work collaboratively with various teams to assess, monitor, and enhance our IT security posture.

Requirement
At least 6+ years of experience in a similar technical security role
Excellent knowledge in development and implementation of following concepts:
Network Security Concepts, Linux System Security and System Hardening
Data Classification and Data Security Concepts
Understanding of various user access controls, SSO, user profile integrity and access management controls
Experience in Server Application security concepts and security controls
Experience with intrusion detection solutions and web application firewalls/L7 proxies
Planning and executing security audits and continuous security and threat monitoring
DevSecOps experience, implementation of security controls and familiarity with SCAP and continuous security monitoring solutions
Ability to analyze and resolve complex infrastructure resource and application deployment issues
Bachelor's degree in Computer Science, Information Systems, or a related field.
5+ years of experience in IT security compliance or a related role.
Strong understanding of IT security frameworks, such as ISO 27001, ISO 27701, NIST, and CIS.
Knowledge of industry regulations, such as GDPR, CCPA
Experience with risk assessment methodologies and tools.
Excellent analytical, problem-solving, and communication skills.
Ability to work independently and as part of a team.
Professional certifications, such as CISA, CISM, or CISSP, are a plus.
Responsibilities:
Compliance Assessment: Conduct regular assessments of IT systems, processes, and controls to identify vulnerabilities and ensure compliance with security standards.
Privacy Impact Assessment: Conduct regular PIA assessments for various projects in LotusFlare
Policy Development and Implementation: Assist in the development, implementation, and maintenance of IT security policies, procedures, and guidelines.
Risk Management: Identify, assess, and mitigate IT security risks through proactive measures and incident response.
Audit Support: Collaborate with internal and external auditors to facilitate IT security audits and provide necessary documentation.
Security Awareness: Promote security awareness across the organization through training programs and communication initiatives.
Incident Response: Participate in incident response activities, including investigation, containment, and remediation.
Vendor Management: Assess the security posture of third-party vendors and ensure compliance with our security requirements.

Benefits:
Competitive salary package , Paid lunch (In the office)
Yearly bonus , Training and workshops
Top-of-the-class engineers to learn from and work with

LotusFlare employees join and remain at LotusFlare for two simple reasons. First, they can see immediately that their work makes a positive impact for LotusFlare customers and, secondly, that they grow on a personal level by developing best practice and experience in cloud-native enterprise software. LotusFlare Founder and CEO Sam Gadodia believes that if you want to make an impact and change industries for the better, you should consider joining LotusFlare.
LotusFlare looks for people all around the world who are passionate in their aim to make an impact and change industries for the better by simplifying technology. Headquartered in the heart of Silicon Valley with offices in EMEA and APAC, LotusFlare serves Verizon, Globe Telecom, MPIC, Digi, DISH Networks, Permata Bank, Singtel, Digicel, Supercell and other leading enterprises around the world.