Security Engineer

Company Description Times Internet is India’s largest digital products company, building premium platforms that simplify and enhance the lives of millions of users across News, Sports, Fintech, and Enterprise solutions. Its portfolio includes leading brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Indiatimes, Whatshot, Techgig, Times Mobile, and more, all designed to enrich user experiences and connect people with their interests. The organization is an equal opportunity employer that actively promotes inclusivity and diversity and has achieved gender pay parity, independently verified by Aon Hewitt. Times Internet focuses on innovation, new technologies, and impactful ideas to help people make the most of every day, offering professionals the opportunity to contribute to high-scale, industry-leading digital products.
Role Description This is a full-time Security Engineer role based in Noida with a hybrid work arrangement, allowing a mix of on-site and work-from-home flexibility. The Security Engineer will design, implement, and maintain security controls across applications, networks, and infrastructure to protect Times Internet’s digital products and data. Daily responsibilities include performing security assessments and code reviews, monitoring systems for vulnerabilities and threats, and responding to security incidents in coordination with engineering and operations teams. The role involves developing secure architecture guidelines, automating security testing where possible, and contributing to security policies, standards, and documentation. The Security Engineer will collaborate with cross-functional teams, support security awareness initiatives, and stay current with emerging cybersecurity trends and compliance requirements.
Qualifications
Strong foundation in Cybersecurity and Security Engineering, including secure architecture design and implementation.
Hands-on experience with Application Security practices such as secure coding, threat modeling, code review, and application vulnerability assessment.
Knowledge of Network Security concepts and technologies, including firewalls, VPNs, intrusion detection/prevention, and network segmentation.
Understanding of Information Security principles, risk management, access control, data protection, and security governance.
Proficiency with common security tools (e.g., vulnerability scanners, SIEM, endpoint protection, web application firewalls).
Experience investigating and responding to security incidents, including log analysis and root cause identification.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
Relevant certifications such as CEH, OSCP, CISSP, or GIAC are an advantage.
Ability to work collaboratively with product, engineering, and operations teams, and communicate security risks clearly to technical and non-technical stakeholders.

Work arrangement
Hybrid