Digantara is a leading Space Surveillance and Intelligence company focused on ensuring orbital safety and sustainability. With expertise in space-based detection, tracking, identification, and monitoring, Digantara provides comprehensive domain awareness across all regimes, enabling end-users to gain actionable intelligence on a single platform. At the core of its infrastructure lies a sophisticated integration of hardware and software capabilities aligned with the key principles of situational awareness: perception (data collection), comprehension (data processing), and prediction (analytics). This holistic approach empowers Digantara to monitor all Resident Space Objects (RSOs) in orbit, fostering comprehensive domain awareness.
Why Us?
- Be part of a collaborative and innovative environment where your ideas and skills make a real difference to the entire space realm.
- Push the boundaries with hands-on experience, greater responsibilities, and rapid career advancement.
- Competitive incentives, galvanising workspace, blazing team—pretty much everything you have heard about a startup.
Ideal Candidate:
- The Security Engineer 2 is a mid-level (L2) engineer who owns IT security governance, ISO and SOC 2 audit readiness, network security, AWS cloud security and product security.
Responsibilities:
IT security and GRC:
• Maintain the security policy set, risk register and control mapping, and run policy rollout and user acceptance.
• Run risk assessments and track treatment actions to closure.
• Review the security of vendors and third parties before they are onboarded.
• Review Microsoft 365, Entra ID and email security configuration against the security baseline.
ISO and SOC 2 audit readiness:
• Own the readiness plan: scoping, control owners, evidence collection and internal audits.
• Coordinate with external auditors, prepare for audits and drive remediation of findings.
• Define security requirements for IT controls, and check that IT controls produce the evidence auditors need.
Cloud security (AWS):
• Review AWS accounts for risky configuration across IAM, network exposure, logging, encryption and storage access.
• Define and enforce account guardrails and baseline configurations, and monitor cloud security posture.
• Review infrastructure-as-code and architecture changes for security before release.
Network security:
• Review firewall, VPN and segmentation design and rule changes for security.
• Review Wi-Fi and remote access security, and make sure findings from network audits are fixed.
• Define network security requirements and monitoring, working with IT & Network Ops, who run the network.
Product security:
• Build security into the development lifecycle through threat modeling and secure design reviews.
• Run and triage static analysis, dependency and secrets scanning, and track fixes with engineering teams.
• Coordinate penetration tests and handle vulnerability reports against company products.
Operations and awareness:
• Support vulnerability management and incident response with the Enterprise Security Engineer.
• Run phishing exercises and security awareness sessions.
• Help define and enforce security controls for AI tools, including access, data handling and connector permissions.
Qualifications:
• 3 to 6 years of experience in security engineering, GRC, network, cloud or product security
• Hands-on experience with ISO and SOC 2: implementing controls, collecting evidence and supporting internal or external audits.
• Practical AWS security experience: IAM, VPC networking, logging, encryption and key management, and native security services.
• Working knowledge of network security: firewalls, VPNs, segmentation and secure Wi-Fi.
• Application security experience: secure development lifecycle, threat modeling, static analysis, and dependency and secrets scanning.
• Experience writing policies, risk assessments and procedures that teams actually follow.
• Scripting (Python or Bash) and familiarity with infrastructure-as-code such as Terraform or CloudFormation.
• Strong written and spoken communication, including explaining risk to non-technical staff.
Bachelor's degree in computer science, information technology or a related field, or equivalent experience
Preferred Qualities:
• Certifications such as AWS Security Specialty, CISSP, CISM, CCSP, or ISO 27001 Lead Implementer or Auditor.
• Experience with enterprise firewall and VPN platforms.
• Experience with a compliance automation platform such as Sprinto.
• Experience securing containers, Kubernetes and CI/CD pipelines.
• Understanding of endpoint management, EDR and CASB from a requirements and audit-evidence point of view.
• Familiarity with Microsoft 365 and Entra ID security configuration.
• Experience writing usage and security policies for AI tools.