Security Engineer

Rubiscape operates at the intersection of AI, data, and enterprise decision-making — a position that demands uncompromising security across every layer of the platform. As a Security Engineer, you will own the design, implementation, and continuous hardening of security controls across Rubiscape’s SaaS, BYOC, on-premises, and air-gap deployment models. You will work directly with platform engineering and product teams to embed security into the fabric of a system trusted by Fortune 500 enterprises and government organisations with the most demanding compliance requirements in India and globally.

·         Design and implement layered security controls including RBAC, attribute-based access control, network segmentation, and encryption-at-rest and in-transit across all Rubiscape deployment models.

·         Conduct regular threat modelling exercises (STRIDE/PASTA) for new platform features across RubiFlow, RubiStudio, RubiSight, RubiAI, and the Business Workbench.

·         Build and maintain audit trail and data lineage security mechanisms to satisfy ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 requirements.

·         Lead vulnerability assessments and penetration testing cycles; triage findings, assign severity, and drive remediation with engineering owners to closure within defined SLAs.

·         Instrument SIEM pipelines (Splunk / ELK) with Rubiscape-specific detection rules for insider threats, data exfiltration, and privilege escalation attempts.

·         Define and enforce security baselines for air-gap and on-premises deployments used in government and defence customer environments, including CERT-IN compliance requirements.

·         Participate in customer trust reviews, security questionnaires, and pre-sales security assurance calls for enterprise and regulated-sector accounts.

·         Certifications: CISSP, CEH, OSCP, or equivalent.

·         Experience securing multi-tenant SaaS platforms or enterprise data/AI platforms.

·         Familiarity with CERT-IN guidelines and MeitY security frameworks for cloud-deployed enterprise software.

·         Prior exposure to air-gap or high-assurance deployment environments in government or defence sectors.

Rubiscape is India’s leading Decision Intelligence Platform, unifying data engineering, BI, machine learning, and agentic AI in a single governed platform. Built in Pune and trusted by Fortune 500 enterprises across BFSI, manufacturing, healthcare, and government. 8 international innovation patents. 10 Industry-Academia Labs & COEs. From BI to AI — One Platform. Every Decision.

·         4+ years of experience in information security engineering within a product or SaaS company.

·         Hands-on expertise with RBAC/ABAC design, PKI, secrets management (HashiCorp Vault or equivalent), and zero-trust network architecture.

·         Practical experience with SIEM platforms (Splunk, ELK, or equivalent) including custom rule authoring and alert tuning.

·         Working knowledge of ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 compliance frameworks.

·         Proficiency in at least one scripting language (Python, Bash, or Go) for security automation and tooling.

·         Strong documentation skills — ability to produce threat models, security design documents, and runbooks that engineering and compliance teams can act on.