Own cloud, corporate IT, identity, endpoint, monitoring, incident response, and compliance security. Harden AWS, GCP, or Azure environments; manage IAM, networking, secrets, logging, configuration baselines, SSO, MFA, RBAC, and MDM. Partner with engineering on secure development, vulnerability remediation, and infrastructure-as-code security. Implement SOC 2 and ISO 27001 controls, collect audit evidence, support vendor assessments, and deliver security awareness training.
About Quin
Why this role exists
What you'll own
Quin is a safety-technology company. We embed sensor tech — crash detection, motion sensing, connectivity — into helmets and protective gear as an ingredient brand, shipping inside products from partners across motorcycling, cycling, sports, Industrial PPE and more. Quin products are designed to scale to millions of users, adopted by leading, global brands. Our engineering and product operations centre is in Hyderabad, where we are building our team and product with world-class excellence.
This is the role focussed on ensuring our systems are secure and our security posture is not only well documented, but proudly advertised.
This role is a technical lead of our compliance engine.
Corporate IT & identity
- Identity as the backbone: SSO, MFA, least-privilege access, and clean joiner/mover/leaver flows across all locations.
- SaaS administration and access governance across our tool estate.
Cloud & product security
- Harden our cloud environment (network, secrets, key management, logging, config baselines) as the portal scales to millions of users.
- Partner with engineering on secure SDLC: dependency and vulnerability management, security review of new services, and remediation tracking.
Endpoint & device
- MDM across the fleet, disk encryption, patch baselines, and a sane BYOD/company-device policy.
Security monitoring & incident response
- Centralised logging/alerting, a workable detection baseline, and an incident-response runbook.
Compliance evidence & controls
- Implement and operate the technical controls behind SOC 2 and ISO 27001, and own continuous evidence collection so audits are boring.
- Feed vendor/third-party security assessments.
Security awareness
- Lightweight, useful security training and phishing resilience for the team.
- 3–6 years in security engineering, cloud security, or IT/infrastructure with a strong security lean.
- Hands-on cloud security on at least one hyperscaler (AWS, GCP or Azure): IAM, networking, secrets/key management, logging, config hardening.
- Solid identity & access fundamentals (SSO/SAML/OIDC, MFA, RBAC) and endpoint management (MDM).
- Working understanding of SOC 2 and/or ISO 27001 controls — you've supplied evidence for an audit, or you can clearly show you know what one demands.
- Comfortable scripting/automating (Python/Bash) and reading infrastructure-as-code.
- Autonomous and pragmatic: you secure things without becoming the department of "no."
- AWS Security Specialty, AZ-500, CCSP, CISSP, or ISO 27001 Lead Implementer.
- Infrastructure-as-code security (Terraform + Checkov/tfsec) and SIEM experience.
- Prior security work at a product SaaS with an enterprise buyer base.
- AI/LLM security exposure (prompt-injection defence, model/endpoint hardening) — relevant as we run ML on motion data.
- Having stood something up from scratch in a small, scrappy team.
Small team of doers. We hire people who move faster and go deep, not people who manage others to do the work. You'll have real ownership of security and IT posture and very little bureaucracy.
Similar Jobs
Information Technology • Software
Own and operate the AI security runtime control plane across Azure, AWS, and GCP. Build inline AI enforcement, tune prompt-injection, data protection, tool-call, and agent access policies, and integrate security platforms with SIEM/SOC workflows. Lead L3 investigations, automated containment, cloud and Kubernetes security, DevSecOps controls, vendor evaluations, and closed-loop red-team remediation. The role requires automation, infrastructure-as-code security, multi-cloud identity management, incident response, and collaboration with technical leadership.
Top Skills:
AksAWSAws BedrockAws IamAzureAzure Ai FoundryAzure DevopsCopilot StudioDatabricksEksEntra IdGCPGcp IamGcp Vertex AiGithub ActionsKqlKubernetesMcpPowershellPythonSIEMSoarTerraform
Fintech • Financial Services
Leads AWS cloud and infrastructure security engineering across hybrid environments. Designs and validates security controls, strengthens multi-account architectures, secures Kubernetes and EKS, and automates remediation using Terraform, Ansible, scripts, and CI/CD integrations. Drives vulnerability management, risk analysis, SIEM and CNAPP detection improvements, incident investigations, penetration testing, and application/API security assessments. Mentors engineers, guides technical decisions, and communicates security risks and priorities to distributed technology teams.
Top Skills:
Active DirectoryAmazon Ec2Amazon EksAmazon GuarddutyAmazon S3Amazon VpcAnsibleAWSAws CloudtrailAws IamAws KmsAws OrganizationsAws Security HubAws Service Control PoliciesAws WafBashCi/CdCnappDnsInfrastructure As CodeIso 27001KubernetesLinuxMitre Att&CkNistOwaspPowershellPythonSIEMSoarTcp/IpTerraformVpnWindows
Artificial Intelligence • Cloud • Information Technology • Consulting
Manage cloud security and compliance programs across SOC 2, ISO 27001, HIPAA, GDPR, and related frameworks. Assess AWS environments, coordinate audits and penetration tests, conduct risk and vulnerability assessments, administer security tools, track remediation, maintain policies and runbooks, deliver security awareness activities, validate controls, and support incident response and business continuity exercises.
Top Skills:
AWSAws InspectorAws Well-Architected FrameworkDetectifyDrataJumpcloudNmapOwasp ZapSprintoTrend Micro
What you need to know about the Hyderabad Tech Scene
Because of its proximity to leading research institutions and a government committed to the city's growth, Hyderabad's tech scene is booming. With plans to establish India's first "AI city," the city is on track to become one of the world's most anticipated tech hubs, with companies like TransUnion, Schrödinger and Freshworks, among others, already calling the city home.
