Data Security Engineer

Data Security Engineer

Joining Location: Chandigarh
Work Location: Mumbai (on-site deployment at the client)
Experience: 3–6 years
Joining: Immediate
Employment: Full time, XenonStack Private Limited

About the engagement

We are building a Managed Services team to support the enterprise data platform of one of India's largest financial institutions. The platform spans Cloudera on AWS, an on-premises Oracle data warehouse, Oracle GoldenGate replication, Apache Spark and Alation for data governance.

Role summary

Protect the enterprise data platform by managing access, encryption, auditing and security controls across cloud and on-premises systems, in line with BFSI regulatory expectations.

Key responsibilities

• Manage data access controls, role-based access and access reviews across Cloudera, Oracle and Alation.
  
• Implement and monitor AWS security controls: IAM, KMS encryption, secrets management and logging.
  
• Maintain data protection measures such as encryption at rest and in transit, masking and key management.
  
• Support audit, compliance and regulatory requirements; prepare evidence and respond to audit queries.
  
• Monitor security events, investigate access anomalies and support incident response.
  
• Define and enforce access policies aligned with data governance standards.
  
• Review platform configurations for security gaps and recommend remediation.
  
• Coordinate with DataOps, DevOps and client security teams on security changes.
  

Must-have skills

• AWS security: IAM, KMS, secrets management, CloudTrail and audit logging
  
• Access management and data protection practices
  
• Security controls across cloud and on-premises data platforms
  
• Audit and compliance requirements and access policy management
  
• Linux fundamentals
  

Good-to-have skills

• Cloudera security (Ranger, Kerberos), Oracle database security, Alation access governance
  
• Knowledge of RBI/SEBI guidelines, ISO 27001 and the DPDP Act
  
• Certifications such as CISSP, CISM, CEH or AWS Security Specialty
  

Candidate profile

• B.E./B.Tech/MCA or equivalent
  
• Experience in data or infrastructure security in an enterprise, preferably BFSI
  
• Strong documentation, audit-readiness and stakeholder communication skills
  

Terms

• Joining at Chandigarh; strictly on-site deployment at the client location in Mumbai
  
• Immediate joining
  
• Regulated BFSI production environment; background verification (BGV) is mandatory
  
• Rotational shifts and on-call support may be required as per the client's support model
  
• Compensation as per company policy and budget band