Traydstream
Website:
traydstream.com
Job details:
Job Description
Traydstream is seeking an Information Security Engineer to implement and improve security controls across cloud infrastructure, SaaS applications and internal enterprise systems. This is a hands-on individual contributor role focused on cloud security, application security, identity controls, vulnerability management, security monitoring and practical remediation support.
Responsibilities
- Implement and improve security controls across Multi cloud environments, production systems and internal enterprise platforms.
- Support cloud and application security reviews, identify security gaps and work with teams to drive practical remediation.
- Embed security into the SDLC by supporting secure design, application security testing and vulnerability remediation.
- Review application, API and infrastructure risks arising from internal scans, penetration tests and client security findings.
- Strengthen enterprise security across identity, endpoint, email, Microsoft 365 and privileged access controls.
- Monitor security alerts, investigate events and support incident response using SIEM, EDR, cloud and identity security tools.
- Improve detection rules, dashboards, playbooks and repeatable workflows to enhance monitoring and response quality.
- Automate routine security checks, reporting and control validation using PowerShell, Python or similar scripting tools.
- Secure AI/ML workloads and use AI-driven approaches to streamline security reviews, monitoring, reporting and remediation workflows.
- Work with Engineering, DevOps, IT, Product and Compliance teams to communicate risks clearly and support timely remediation.
Your Skills And Experience
- Experience: 5 to 8 years of hands-on information security engineering experience, preferably in SaaS, technology or regulated environments.
- Cloud security: Practical experience securing Azure environments, including IAM, network security, logging, secure configuration and data protection.
- Application security: Working knowledge of OWASP Top 10, API security, secure SDLC, application testing and vulnerability remediation.
- Identity and enterprise security: Hands-on experience with Microsoft Entra ID, MFA, Conditional Access, endpoint security, Microsoft 365 security and privileged access controls.
- Security operations: Ability to investigate alerts, analyse logs, tune detections and support incident response.
- Automation: Ability to use PowerShell, Python or similar scripting languages to automate security tasks and reporting.
- AI security: Practical awareness of securing AI/ML workloads, protecting sensitive data and using AI securely to improve security workflows.
- Certifications: Azure Security Engineer Associate, Security Operations Analyst Associate, CISSP, CCSP, Security+ or equivalent certification is preferred.
- Communication and execution: Clear communicator, self-driven, detail-oriented and able to deliver practical security outcomes across multiple priorities.
Click on Apply to know more.
