Information Security Engineer

**About Simplismart** Simplismart is a GenAI inference platform to deploy, scale, and monitor any GenAI model (LLMs, speech, vision, or diffusion) across cloud or on-prem. Built for strict SLAs, enterprise-grade security, and full observability. Its modular design lets you optimize for cost or latency or auto- select the best topology per workload. **What is expected from you-** • Own ISO 27001 and SOC 2 Type II readiness, including controls, evidence, audits, and auditor coordination. • Handle enterprise security questionnaires such as CAIQ and VSAQ and participate in customer security reviews. • Develop and maintain security policies covering access, encryption, logging, incident response, BCP/DR, vendor risk, SDLC, and AI governance. • Design and review zero-trust identity and privileged-access workflows. • Build security monitoring, SIEM pipelines, incident-response processes, and tabletop exercises. • Own vulnerability management, image scanning, SBOMs, CVE triage, and software supply- chain security. • Drive data protection across classification, encryption, key management, retention, and deletion. • Assess cloud, colo, and infrastructure vendors and maintain the vendor risk program. • Translate applicable security and privacy regulations into practical technical controls. What we’re looking for- • 5+ years in information security, security engineering, or GRC with strong engineering experience. • Hands-on experience securing multi-tenant Kubernetes environments. • Strong knowledge of RBAC, admission control, network policies, secrets management, and CIS benchmarks. • Architecture-level experience with at least two of AWS, GCP, or Azure, plus bare- metal/colo environments. • Experience taking an organization through ISO 27001 certification or SOC 2 Type II as a primary contributor. • Experience responding to and defending enterprise security questionnaires. • Strong technical and security documentation skills. • Working knowledge of ISO 27001, SOC 2, GDPR, DPDP Act, and relevant security frameworks. **Good to have-** • Experience securing AI/ML infrastructure, including model/weight protection, inference- time data handling, and GPU tenant isolation. • Experience implementing compliance automation platforms such as Vanta, Sprinto, or Drata. • Certifications such as CISSP, CCSP, CISA, ISO 27001 Lead Auditor/Implementer, or CKS. • Experience with STRIDE/PASTA threat modelling and secure design reviews. • Familiarity with high-performance networking and its security implications. **Why Join Simplismart?** • Opportunity to define and lead the brand identity of a fast-growing GenAI company. • Work closely with leadership on high-impact initiatives from global event campaigns to overall storytelling. • Be part of a team that values design as a strategic lever, not just execution. • Competitive compensation and growth opportunities in a high-energy startup environment