Security Engineer

About the Role

Rubiscape operates at the intersection of AI, data, and enterprise decision-making — a position that demands uncompromising security across every layer of the platform. As a Security Engineer, you will own the design, implementation, and continuous hardening of security controls across Rubiscape’s SaaS, BYOC, on-premises, and air-gap deployment models.

You will work directly with platform engineering and product teams to embed security into the fabric of a system trusted by Fortune 500 enterprises and government organisations with the most demanding compliance requirements in India and globally.

Key Responsibilities

• Design and implement layered security controls including RBAC, attribute-based access control, network segmentation, and encryption-at-rest and in-transit across all Rubiscape deployment models.
• Conduct regular threat modelling exercises (STRIDE/PASTA) for new platform features across Rubi. Flow, Rubi. Studio, Rubi. Sight, RubiAI, and the Business Workbench.
• Build and maintain audit trail and data lineage security mechanisms to satisfy ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 requirements.
• Lead vulnerability assessments and penetration testing cycles; triage findings, assign severity, and drive remediation with engineering owners to closure within defined SLAs.
• Instrument SIEM pipelines (Splunk / ELK) with Rubiscape-specific detection rules for insider threats, data exfiltration, and privilege escalation attempts.
• Define and enforce security baselines for air-gap and on-premises deployments used in government and defence customer environments, including CERT-IN compliance requirements.
• Participate in customer trust reviews, security questionnaires, and pre-sales security assurance calls for enterprise and regulated-sector accounts.

Nice to Have

• Certifications: CISSP, CEH, OSCP, or equivalent.
• Experience securing multi-tenant SaaS platforms or enterprise data/AI platforms.
• Familiarity with CERT-IN guidelines and MeitY security frameworks for cloud-deployed enterprise software.
• Prior exposure to air-gap or high-assurance deployment environments in government or defence sectors. About Rubiscape Rubiscape is India’s leading Decision Intelligence Platform, unifying data engineering, BI, machine learning, and agentic AI in a single governed platform. Built in Pune and trusted by Fortune 500 enterprises across BFSI, manufacturing, healthcare, and government. 8 international innovation patents. 10 Industry-Academia Labs & COEs. From BI to AI — One Platform. Every Decision.

Requirements

Requirements

• 4+ years of experience in information security engineering within a product or SaaS company.
• Hands-on expertise with RBAC/ABAC design, PKI, secrets management (Hashi. Corp Vault or equivalent), and zero-trust network architecture.
• Practical experience with SIEM platforms (Splunk, ELK, or equivalent) including custom rule authoring and alert tuning.
• Working knowledge of ISO 27001, SOC 2 Type II, and India’s DPDP Act 2023 compliance frameworks.
• Proficiency in at least one scripting language (Python, Bash, or Go) for security automation and tooling.
• Strong documentation skills — ability to produce threat models, security design documents, and runbooks that engineering and compliance teams can act on.