Data Security Engineer (Chandigarh, On-site)
Data Security Engineer on XenonStack's Managed Services team, protecting a large Indian financial institution's data platform (Cloudera on AWS, Oracle, GoldenGate, Alation) by managing access controls, encryption, auditing and compliance on-site at the client in Mumbai. Core stack: AWS security (IAM, KMS, CloudTrail), data protection and audit readiness.
- Compensation
- Not disclosed
- Location
- Chandigarh, India
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 3–6 years of experience
- AWS security: IAM, KMS, secrets management, CloudTrail and audit logging
- Access management and data protection practices
- Security controls across cloud and on-premises data platforms
- Audit and compliance requirements and access policy management
- Linux fundamentals
- B.E./B.Tech/MCA or equivalent
- Experience in data or infrastructure security in an enterprise
- Strong documentation, audit-readiness and stakeholder communication skills
- Joining at Mohali office; strictly on-site deployment at client location in Mumbai
- Immediate joining availability
- Mandatory background verification (BGV)
- Willingness to work rotational shifts and on-call support as per client's support model
Nice to have
- BFSI domain experience
- Cloudera security (Ranger, Kerberos)
- Oracle database security
- Alation access governance
- Knowledge of RBI/SEBI guidelines, ISO 27001 and the DPDP Act
- Certifications such as CISSP, CISM, CEH or AWS Security Specialty
Full description
DATA SECURITY ENGINEER (CHANDIGARH, ON-SITE)
Location: XenonStack office, Sector 75, STPI, Mohali (Chandigarh Tricity), on-site
Experience: 2–4 years | Joining: Immediate | Employment: Full time, XenonStack Private Limited
ABOUT XENONSTACK
XenonStack is a Data and AI Foundry for Agentic Systems, enabling enterprises to design, deploy, operate, and scale intelligent agents across digital and physical environments. We build enterprise-grade platforms across the agentic stack:
- Akira AI - Reasoning and agent orchestration.
- ElixirData - Agentic analytics intelligence. Explainable, decision-centric analytics for measurable business outcomes.
- NexaStack - Agentic infrastructure automation. Secure, compliant AI deployment across cloud, edge, and on-prem.
- MetaSecure - Trust, compliance and defense. Continuous assurance with AI-BOMs, risk scoring, and agentic security.
Our mission is to accelerate the world's transition to AI + Human Intelligence by making agentic systems reliable, responsible, and enterprise-ready.
ABOUT THE ENGAGEMENT
We are building a Managed Services team to support a large-scale enterprise data platform. The platform spans Cloudera on AWS, an on-premises Oracle data warehouse, Oracle GoldenGate replication, Apache Spark for ETL and data processing, and Alation for data governance.
ROLE MISSION
Protect the enterprise data platform by managing access, encryption, auditing and security controls across cloud and on-premises systems, in line with regulatory expectations.
KEY RESPONSIBILITIES
- Manage data access controls, role-based access and access reviews across Cloudera, Oracle and Alation.
- Implement and monitor AWS security controls: IAM, KMS encryption, secrets management and logging.
- Maintain data protection measures such as encryption at rest and in transit, masking and key management.
- Support audit, compliance and regulatory requirements; prepare evidence and respond to audit queries.
- Monitor security events, investigate access anomalies and support incident response.
- Define and enforce access policies aligned with data governance standards.
- Review platform configurations for security gaps and recommend remediation.
- Coordinate with the Mumbai DataOps and DevOps teams and the client security team on security changes.
REPORTING
Reports to the Managed Services delivery lead and works closely with XenonStack's CISO and the client's security team.