Security
Security & Compliance Engineer
Keep TWINJAM worthy of the access agencies give it. You will own our SOC 2 Type II program, run vendor reviews for the subprocessors list, and answer the security questionnaires our Scale customers send.
- Location
- Mumbai, Colaba (hybrid)
- Type
- Full-time
- Compensation
- ₹36L to ₹50L base plus ESOPs
- Reports to
- Kavya Iyer, Head of Security & Compliance
- Posted
- Oct 6, 2026
What you will do
- Operate controls and evidence collection for SOC 2 Type II, GDPR and India's Digital Personal Data Protection Act, 2023.
- Harden AWS infrastructure across our US, EU and India regions with infrastructure-as-code and policy checks.
- Triage reports submitted through our responsible disclosure program and coordinate fixes.
- Coordinate the annual third-party penetration test and track remediation to closure.
- Complete customer security reviews and keep the trust documentation current.
What you bring
- 4+ years in cloud security, security engineering or GRC at a SaaS company.
- Deep familiarity with AWS IAM, KMS, VPC design and logging.
- Experience preparing for or maintaining a SOC 2 or ISO 27001 audit.
Nice to have
- OSCP, CISSP, CCSP or AWS Security Specialty.
- Experience securing LLM-backed features.
- Working knowledge of DPDP Act consent and breach notification duties.
Missing a few of these is fine. We care more about how you think than about a checklist.
Why this role matters
Agencies trust TWINJAM with their client channels and contracts because we are careful, quiet and accurate. Everyone on the team protects that trust: we review flags with customers, read real SOWs, and measure ourselves on how rarely a PM has to dismiss an alert.
See the product you would be building.
The sandbox runs a live scope feed with real SOW clauses, flags and change orders.