GRC Engineer

Experience: 1-2 years of experience.

Role Overview

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

We are looking for an associate-level Cloud Complaince Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You ll be Doing

Security Operations

Monitor infrastructure, application, and security alerts and assist with incident investigation.

Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.

Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.

Track security issues and corrective actions through closure.

Vulnerability Management

Run and review application and infrastructure vulnerability scans.

Maintain a vulnerability register and coordinate remediation with engineering teams.

Support VAPT and penetration-testing exercises and validate closure of findings.

Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance Governance

Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.

Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.

Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.

Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM Endpoint Security

Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.

Maintain device inventory and monitor endpoint compliance.

Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.

Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.

Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD Cloud

Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.

Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.

Automate repetitive deployment, infrastructure, security, and compliance tasks.

Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.

Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.

Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.

Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

1-2 years of experience with strong fundamentals are welcome.

Basic scripting knowledge in Python, Bash, or similar.

Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.

Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates

Who can join immediately

Female candidates returning to work after a career break are strongly encouraged.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

Key skills: Cloud computing, Automation, Networking, Linux, SOC, DNS, HTTP, Security operations, Auditing, Python.

Role: Site Reliability Engineer

Industry Type: IT Services & Consulting

Department: Engineering - Software & QA

Employment Type: Full Time, Permanent

Role Category: DevOps

Education: UG: Any Graduate

Education: PG: Any Postgraduate