Information Security Specialist

Job summary

Tripgain is hiring an experienced Information Security Specialist with 3 to 6 years of background in cybersecurity operations, risk management, vulnerability handling, and incident response. The role focuses on safeguarding the organization’s information assets through security controls, threat monitoring, incident handling, and compliance support.

Key responsibilities

• Track and evaluate security alerts and events through SIEM, EDR, and related monitoring platforms.
• Investigate security incidents, coordinate with internal stakeholders, document findings, and drive timely closure.
• Carry out vulnerability assessments, assess risk, and follow up on remediation actions.
• Review security posture across servers, endpoints, applications, and cloud workloads on a periodic basis.
• Deploy and maintain controls across network, endpoint, email, identity, and cloud environments.
• Support security governance by updating policies, standards, and procedures.
• Assist with compliance work, internal/external audits, and requirements aligned to ISO 27001, SOC 2, PCI DSS, GDPR, and other relevant standards.
• Work with IT, infrastructure, cloud, and application teams to embed secure design and operational practices.
• Perform access reviews, IAM tasks, and privileged access monitoring.
• Contribute to threat hunting, continuous monitoring, and ongoing improvements in security operations.
• Support cybersecurity awareness efforts and share best-practice guidance with employees.
• Keep incident records, risk logs, remediation trackers, and related documentation up to date.

Required skills and experience

• 3 to 6 years of experience in information security or cybersecurity.
• Strong grasp of security principles, risk management, and practical security controls.
• Hands-on exposure to SIEM tools such as Microsoft Sentinel, Splunk, IBM QRadar, or LogRhythm.
• Experience with endpoint protection tools such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
• Working knowledge of vulnerability scanners like Qualys, Nessus, or Rapid7.
• Understanding of networking fundamentals, including TCP/IP, DNS, VPN, firewalls, IDS/IPS, and web security.
• Knowledge of cloud security concepts across AWS, Azure, or Google Cloud Platform.
• Familiarity with IAM, MFA, and Active Directory.
• Awareness of security frameworks including NIST CSF, ISO 27001, CIS Controls, and MITRE ATT&CK.
• Basic scripting ability in PowerShell, Python, or Bash is preferred.
• Strong analytical, communication, documentation, and problem-solving skills.

Preferred qualifications

A bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field is preferred. Professional certifications such as CompTIA Security+, CEH, CySA+, SSCP, CISSP (Associate or Certified), Microsoft SC-200, AZ-500, or an equivalent credential are also desirable. Experience in enterprise environments with cloud and hybrid infrastructure is an advantage, as is exposure to SOAR, DLP, CASB, or Zero Trust architectures.

Additional requirements

The role calls for strong investigative ability, sound prioritization during incidents, excellent collaboration with stakeholders, careful documentation, and the ability to work independently as well as within a cross-functional team. A continuous learning mindset and interest in emerging cyber threats and technologies are important.

Eligibility

Any graduate can apply.

About the company

Tripgain serves more than 300 clients worldwide with travel technology solutions that simplify sourcing, selling, and managing travel content. Its product suite includes an API Gateway with 160+ global and local suppliers, an Online Booking Tool with frontend, backend, and infrastructure support, a Mid-Office Solution for travel operations, and a Unified T&E Solution that supports self-booking, expense management, approval workflows, and compliance-driven corporate travel management. More than 400,000 employees across 350+ companies use TripGain for travel and expense needs.

Notes

No stipend or salary details were provided. No vacancy count, start date, duration, or application deadline was specified.