Company Overview :

KreditBee is a leading fintech platform providing instant personal loans and other financial services to young professionals and self-employed individuals in India. Operating across a wide range of digital channels, KreditBee leverages technology and data analytics to offer convenient and affordable credit solutions to millions of users.

Role Overview :

As a Corporate IT / Enterprise Security Engineer at KreditBee, you will be responsible for maintaining and enhancing the security posture of our corporate IT infrastructure.

You will work closely with the IT, Engineering, and Compliance teams to implement and enforce security policies, conduct security assessments, and respond to security incidents.

Your efforts will directly contribute to protecting sensitive data, ensuring business continuity, and maintaining compliance with industry standards and regulations.

Key Responsibilities :

- Design, implement, and maintain security solutions, including firewalls, intrusion detection/prevention systems, endpoint security solutions, and vulnerability management tools, to protect KreditBee's corporate network and systems.

- Conduct regular security assessments, penetration testing, and vulnerability scanning to identify and remediate security weaknesses.

- Develop and maintain security policies, procedures, and standards in alignment with ISO 27001 and SOC 2 frameworks to ensure compliance and best practices.

- Monitor security logs and alerts, investigate security incidents, and implement appropriate response measures to mitigate risks.

- Automate security tasks and processes using scripting languages such as Python and PowerShell to improve efficiency and effectiveness.

- Provide technical support and guidance to IT staff and end-users on security best practices and procedures to promote a security-aware culture.

- Manage and maintain endpoint security solutions, ensuring all devices are protected against malware and other threats.

- Troubleshoot and resolve complex security issues across various IT systems and platforms to minimize downtime and impact on business operations.

Required Skillset :

- Demonstrated ability to design, implement, and manage enterprise-level security solutions, including firewalls, intrusion detection/prevention systems, and endpoint security platforms.

- Proven expertise in troubleshooting complex security issues across diverse IT environments, including Windows, Linux, and cloud-based systems.

- Proficient in scripting languages such as Python and PowerShell for automating security tasks and incident response.

- Strong understanding of security testing methodologies, vulnerability assessment techniques, and penetration testing tools.

- In-depth knowledge of security frameworks and standards such as ISO 27001 and SOC 2.

- Excellent communication and collaboration skills to effectively work with cross-functional teams and stakeholders.

- Bachelor's degree in Computer Science, Information Security, or a related field.

- Ability to work effectively in a fast-paced, dynamic environment and adapt to changing priorities.