Principal Information Security Engineer

India

Apply with AI Apply

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Automotive, SoftwareIndustries

Requirements

Candidates must have a minimum of 3 years of experience in information security, with a focus on corporate/enterprise security in a global, software-driven business. Proven experience with CrowdStrike Falcon, Zscaler, Microsoft Security tools, Tenable, or similar platforms is required. A solid understanding of governance and risk frameworks, particularly those relevant to enterprise information security management systems, is necessary. Familiarity with secure software development practices and security in cloud environments (Azure preferred) is also needed. Demonstrable ability to be self-driven and work independently, along with strong analytical, problem-solving, and communication skills, are essential. Preferred qualifications include a Bachelor's degree or higher, industry certifications such as CISSP or CISM, experience with Atlassian Jira and Confluence, knowledge of ISO 27001, TISAX, NIST, or CIS, understanding of automotive cybersecurity standards, and knowledge of CI/CD pipelines and security integration.

Responsibilities

The Principal Information Security Engineer will design and maintain robust security technologies, controls, and policies across the global enterprise. They will support the implementation and management of endpoint detection and response (EDR), endpoint protection (EPP), zero trust network access (ZTNA), vulnerability management, and identity and threat protection. The role involves owning information security controls for governance, risk, and compliance (GRC) efforts, including ISO 27001, TISAX, CIS, and customer security assessments. Responsibilities include monitoring, analyzing, and responding to security events, collaborating with vendors and internal teams to resolve threats, and running corporate phishing campaigns and security awareness programs. The engineer will also document security processes, contribute to internal policies, support vulnerability scanning, secure coding, and threat modeling activities, and participate in vendor security assessments and global OEM customer security reviews.

Skills

Information Security

CrowdStrike

Zscaler

Microsoft Security

Endpoint Detection and Response (EDR)

Endpoint Protection (EPP)

Zero Trust Network Access (ZTNA)

Vulnerability Management

Identity and Threat Protection

Microsoft Security PIM

Conditional Access

Windows Hello

ISO 27001

TISAX

CIS

Phishing Campaigns

Security Training

Security Awareness

Secure Coding

Threat Modeling

Vendor Security Assessments

Cerence

AI solutions for automotive in-car experiences

About Cerence

Cerence develops AI-powered solutions specifically for the automotive industry, focusing on improving the in-car experience for drivers and passengers. Their products include voice recognition systems and AI-driven assistants that enhance entertainment, connectivity, and safety while driving. Cerence collaborates with major automotive manufacturers to integrate these technologies into vehicles, such as the Mercedes Benz User Experience. Unlike many competitors, Cerence emphasizes a comprehensive approach that includes ongoing support and upgrades, ensuring their technology adapts to trends like smart cities and electric vehicles. The company's goal is to transform transportation and shape the future of mobility through innovative and user-friendly solutions.

Burlington, MassachusettsHeadquarters

2019Year Founded

$190MTotal Funding

IPOCompany Stage

Automotive & Transportation, AI & Machine LearningIndustries

1,001-5,000Employees