Nist Jobs in Bengaluru
503 Jobs Found
It System And Security Engineer
Locus
IT System and Security Engineer Location: Bengaluru Work Type: Full-Time Company Overview Locus is a battle-tested, agentic Transportation Management System powering logistics across 30+ countries. In 2025, Locus joined the Ingka Group (IKEA Retail), combining high-growth tech agility with the scale of a global enterprise while continuing to operate independently. Role Overview We are seeking an IT System and Security Engineer to manage core IT operations, strengthen endpoint security, and ensure compliance. This hands-on role requires technical expertise to maintain a secure, compliant, and efficient environment across Google Workspace, Okta, and Jamf. Key Responsibilities Operations Management: Oversee user onboarding/offboarding, hardware provisioning, and complex troubleshooting. Security Administration: Monitor Okta, Jamf Pro, and Jamf Protect to ensure MFA enforcement and device encryption. Remediation: Proactively review and fix security vulnerabilities and compliance findings. Automation: Streamline routine tasks using Python, Bash, or Google Apps Script. Compliance & Audits: Maintain asset inventories and prepare evidence for SOC2 and ISO27001 readiness. Skills & Qualifications 2 5 years of experience in IT administration or security operations. Expertise: Google Workspace security and Identity Management (Okta). MDM Platforms: Proven experience with Jamf Pro, Intune, or equivalent tools. Scripting: Ability to write automation scripts in Python or Bash. Frameworks: Familiarity with SOC2 / ISO27001 compliance processes. What We Value Global Mindset: Curiosity about diverse markets. Driven: Energized by complex challenges. Thoughtful: Analytical and deliberate approach. Exact in Craft: Commitment to detail and excellence. Help redefine logistics through innovation. We offer competitive compensation, a supportive work environment, and the opportunity to scale IT security within the IKEA ecosystem.
Infrastructure Security Leader
Observe.ai Networks Private Limited
Infrastructure Security Leader Location: Bengaluru About Us: Observe.AI Observe.AI is the leading AI-powered platform for customer experience, enabling enterprises to automate customer interactions using AI agents. Our platform ensures natural conversations, delivering predictable outcomes, and is trusted by top companies like DoorDash, Affordable Care, Signify Health, and Verida. Observe.AI blends advanced speech understanding, workflow automation, and enterprise-grade governance to deliver end-to-end AI solutions that optimize both human and AI interactions, providing insights for coaching and quality management. At Observe.AI, we re on a mission to transform customer experiences through AI. As a founding member of our Infrastructure/Cloud Security team, you will have the opportunity to shape and design cloud security from the ground up for a platform trusted by over 80 million users. Reporting directly to the VP of Information Security, you will drive a defense-in-depth approach across infrastructure, IAM, and networks. This is a unique, zero-to-one role where you ll define security strategy, mentor the team, and make a long-lasting impact in a fast-growing AI company. What You ll Be Doing: Security Strategy Development: Design and document security policies, reference architectures, design patterns, and roadmaps to protect our platform. Secure Access & Network Design: Lead efforts to design secure access controls and networks for production environments. Cross-Department Leadership: Collaborate with Corporate IT to implement security measures within the corporate environment. Defense-in-Depth: Implement network segmentation, firewall configurations, VPNs, and deep packet inspection to minimize impact from security incidents. AWS Infrastructure Security: Re-architect AWS infrastructure to enhance security, ensuring that networks, VPCs, and security configurations are optimized. Vulnerability Management: Identify tools and technologies to scan networks, OS, and infrastructure for vulnerabilities, and work with SRE teams to remediate identified risks. Security Compliance: Represent Infrastructure Security in PCI, SOC, ISO, HITRUST, and other regulatory audits, ensuring compliance. Collaborative Design: Partner with engineering teams and architects to ensure infrastructure designs meet both business and security requirements. Stakeholder Collaboration: Work with other teams to integrate up-to-date security features and infrastructure designs across the organization. What You ll Bring to the Role: 9+ years of experience in Software Engineering, Network Security, and AWS Security. Proven track record in designing and implementing secure Cloud Infrastructure, Network Security, and Corporate IT Security. Experience at a SaaS product company with hands-on knowledge of cloud security. Leadership experience in managing Infrastructure Security teams or Security-Focused SRE teams. Strong understanding of network designs, protocols, and certifications like CCNA (or similar). Ability to handle multiple, high-priority projects simultaneously while maintaining focus and quality. Comfort with working off-hours to handle security incidents in a dynamic, fast-paced environment. First-hand experience with major cloud providers, specifically AWS. Deep understanding of large-scale systems and N-tier architectures. Excellent communication skills, able to effectively influence and collaborate with stakeholders across the organization. Perks & Benefits: Medical Insurance: Comprehensive options, including free online doctor consultations. Leave Policies: Yearly privilege and sick leaves as per Karnataka S&E Act, along with generous national, festive, and parental leave. Learning & Development: Access to a fund that supports continuous learning and professional growth. Flexible Benefits: Tax exemptions for meals, PF, etc., along with other flexible benefit plans. Team Culture: Fun events to foster collaboration and culture across the organization.
Information Security Engineer
Altisource
Job Title: Information Security Engineer Location: Bengaluru Company: Altisource (NASDAQ: ASPS) About Altisource At Altisource, we develop cutting-edge technologies and services for the mortgage and real estate industry. We re a trusted partner to 7 of the top 10 U.S. mortgage servicers, operate one of the leading real estate auction platforms, and support a cooperative with over 15% market share in the $1.8 trillion U.S. originations market. If you're passionate about cybersecurity and want to make an impact in a high-growth, tech-driven environment this is the role for you. Position Summary We re looking for a highly motivated Information Security Engineer to support our growing security operations. You will play a vital role in identifying and mitigating security risks across applications, systems, and networks. This role involves vulnerability assessments, code reviews, and automation of security tasks ensuring Altisource remains secure and compliant in a fast-paced environment. Key Responsibilities Conduct vulnerability assessments on applications, networks, and systems. Perform manual verification to reduce false positives and validate security fixes. Communicate identified vulnerabilities and recommend remediation steps to internal teams. Perform secure code reviews and assist development teams in fixing identified issues. Identify and mitigate risks throughout the software development lifecycle. Leverage commercial and open-source tools for vulnerability detection (e.g., Qualys, Nessus, Burp Suite). Assist in internal penetration testing initiatives. Develop internal tools and automate security tasks, leveraging AI where applicable. Stay updated on the latest threats, tools, and best practices in cybersecurity. Create detailed assessment reports and present findings to technical and non-technical stakeholders. Train and mentor team members on vulnerability management processes and tools. Required Qualifications Bachelor s degree in Computer Science, Engineering, or a related field. 3 to 5 years of hands-on experience in information security or related roles. Relevant certifications such as CEH, GIAC, or similar. Solid experience in: Network vulnerability assessments Application scanning and secure code review Windows, Linux, and Unix operating systems Familiarity with OWASP tools, methodologies, and security best practices. Strong communication skills both written and verbal. Preferred Skills Experience with tools like: Qualys, Nessus, Nexpose, SAINT Burp Suite Pro, HP WebInspect Static analysis tools (e.g., IBM AppScan Source, Fortify) Proficiency in one or more programming languages: Java, C, C++, .NET (C#, VB). Experience delivering training or presenting technical content to teams. Background in technical writing or web development is a plus. Be part of a team securing technologies used by top players in the mortgage and real estate space. Work with modern tools and frameworks. Enjoy a collaborative environment that supports innovation, growth, and learning. Qualification : Bachelors degree in Computer Science, Engineering, or a related field
Calibration Technician
Accord Software & Systems
Job Title: Calibration Technician Location: Bangalore Experience Required: 1 2 Years Education Qualification: Diploma in Electronics & Communication (ECE) or Electrical Engineering Job Summary: We are seeking a detail-oriented and organized Calibration Technician to support the calibration of electronic equipment in accordance with industry standards. The ideal candidate will manage internal and external calibration processes, ensure equipment reliability, and maintain accurate documentation, while adhering to AS9100 and ISO9001 standards. Key Responsibilities: Monitor, witness, and review calibration activities conducted by external calibration houses; verify and approve calibration certificates against defined tolerance limits. Manage the internal calibration process, including scheduling, witnessing, documentation, and obtaining approvals from authorized personnel. Maintain an up-to-date calibration database, ensuring that all equipment is calibrated at specified intervals. Act as the single point of contact for communication between the calibration house and internal design or engineering teams. Ensure all calibrated equipment is protected from unauthorized adjustments, damage, or deterioration that could affect measurement accuracy. Monitor and log environmental conditions of equipment to support calibration integrity. Evaluate equipment reliability and escalate issues when abnormalities or failures are observed. Ensure adherence to AS9100 and ISO9001 standards for all calibration processes. Exhibit an understanding of engineering and technical work disciplines and maintain professional interactions. Required Skills & Competencies: Understanding of equipment calibration principles and tolerance analysis. Experience in working with electronic testing and measuring instruments. Proficient in maintaining calibration records and scheduling tools. Strong attention to detail and analytical mindset. Familiarity with AS9100 and ISO9001 calibration compliance requirements. Good communication and coordination skills for liaising with calibration vendors and internal teams. Qualification : Diploma in Electronics & Communication (ECE) or Electrical Engineering
IT Manager
Thoughtfocus
Job Title: IT Manager Location: Bangalore, India Experience: 12-15 Years Employment Type: Full-Time Role Overview: We are seeking a seasoned IT Manager with strong technical expertise and proven experience in managing IT infrastructure projects. The ideal candidate will lead data center migrations, cloud initiatives, networking, and enterprise infrastructure, ensuring robust, secure, and scalable IT operations. Key Responsibilities: Manage end-to-end IT infrastructure projects including data center migrations, cloud deployments (AWS, Azure, GCP), and networking upgrades. Oversee enterprise infrastructure ensuring high availability, security, and disaster recovery readiness. Lead cross-functional teams while coordinating multiple projects in fast-paced environments. Manage project budgets and implement cost control measures for large-scale infrastructure programs. Implement and adhere to best practices guided by ITIL, PMI, or PRINCE2 frameworks. Collaborate with cybersecurity teams to enforce security policies and controls. Utilize project management tools such as Jira, MS Project, and ServiceNow for effective tracking and reporting. Provide leadership and mentorship to technical teams, driving continuous improvement and operational excellence. Required Skills & Qualifications: 12-15 years of experience in IT infrastructure project management. Strong technical background in cloud platforms (AWS, Azure, GCP), data centers, networking, and enterprise systems. Solid knowledge of ITIL, PMI, or PRINCE2 frameworks. Proven experience in budget management and cost optimization. Deep understanding of cybersecurity principles, disaster recovery, and infrastructure resilience. Excellent communication, leadership, and stakeholder management skills. Hands-on experience with project tracking and service management tools like Jira, MS Project, ServiceNow, or equivalents. Preferred Qualifications: Certifications: PMP, ITIL, PRINCE2, AWS/Azure Cloud certifications (highly desirable). Experience with DevOps practices, automation, and Infrastructure as Code (IaC). Knowledge of hybrid cloud strategies and emerging infrastructure technologies.
Architect-Cyber Security
Camsdata Technologies India Pvt. Ltd.
Architect - Cyber Security | Bengaluru, India Location: Bangalore (Bengaluru) Experience: 12 to 20 Years Industry: IT Security / Cybersecurity Architecture Job Summary: We are looking for a seasoned Cyber Security Architect with over 12 years of experience designing and managing security architectures across multiple industries. The ideal candidate will bring strong expertise in secure design principles, SSDLC implementation, and cloud security especially within Azure environments. Key Responsibilities: Lead the development and management of enterprise-wide security architectures for global, multinational organizations Participate in Security Architecture Review Boards and drive secure coding practices along with Software Security Development Life Cycle (SSDLC) implementation Develop and enforce secure design principles and security standards across platforms Create and maintain current and future state architecture diagrams, supporting the technical roadmap with a comprehensive understanding of the technology market Deliver security solution architectures aligned with the enterprise architecture framework Provide expert guidance on securing multi-tenant cloud environments, with a focus on Microsoft Azure Collaborate with cross-functional teams to align security strategies with business goals and compliance requirements Required Skills & Qualifications: Minimum 12+ years of experience in security architecture across at least two different industries, preferably including cloud service providers Proven track record with security architecture development and governance in large-scale multinational companies Experience with secure coding, SSDLC, and security architecture review processes Strong proficiency in cloud security architecture, especially Azure multi-tenant environments Bachelor s or Master s degree in Information Security, Computer Science, or related field Must hold CISSP certification (Certified Information Systems Security Professional) Experience with architecture certification such as CISSP-ISSAP is highly preferred Additional certifications or memberships in SANS, ISACA, or similar cybersecurity organizations are a plus Azure Architecture or Azure Security certifications highly desirable Lead cybersecurity architecture in a global, dynamic enterprise environment Work with cutting-edge cloud technologies and secure multi-cloud ecosystems Grow professionally with access to industry-leading certifications and training Influence enterprise security strategy at the highest level Qualification : Bachelors or Masters degree in Information Security, Computer Science, or related field
Platform Solution Architect
Rubrik
Platform Solution Architect Job Overview As a Platform Solutions Architect, you will serve as a pre-sales specialist, supporting the broader sales organization with deep technical knowledge across database and cloud workloads. This means working with customers and prospects to educate them on how Rubrik protects and manages data. Additionally, the Solution Architect will have an active role in providing real-world feedback to product teams to enhance the product, testing new features before they are released, and championing new features within the sales team. The Solutions Architect provides both immediate and long-term impact with their technical knowledge and position of influence with prospects and customers. Key Responsibilities Serve as a subject matter expert on Rubrik s data protection and data security solutions, focused on database and cloud workloads. Act as a trusted advisor on assigned opportunities, aligning Rubrik s technology and roadmap with customer business objectives. Lead impactful product demonstrations, technical workshops, and solution presentations tailored for technical and executive-level audiences. Contribute to high-quality proposals, white papers, and responses to RFPs/RFIs. Collaborate with presales teams to design, execute, and troubleshoot proof-of-concepts (POCs), ensuring successful outcomes. Proactively identify technical challenges and architect creative solutions to overcome sales barriers. Translate complex customer requirements into clear, actionable technical strategies. Stay abreast of industry trends in data protection, security, database and cloud technologies, effectively positioning Rubrik s solutions. Evangelize Rubrik s offerings and clearly communicate strategic direction and product roadmap aligned with customer needs. Work closely with Product Management and Engineering to influence feature development based on customer feedback and market demands. Provide competitive intelligence and actionable insights from customer engagements to internal stakeholders. Qualifications 8+ years of successful experience in customer-facing technical sales or consulting roles focused on enterprise database technologies and cloud. Bachelor s Degree in Computer Science, Engineering, or equivalent experience. Deep technical expertise in two or more areas across database and cloud: Database focus: Primary: Oracle (Oracle Cloud, Data Guard, Golden Gate, Exadata, ExaCC) Secondary: MongoDB, Apache Cassandra, SQL Server, IBM DB2, Informix, PostgreSQL Multi-Cloud focus (Azure or AWS or GCP): Primary: AWS EC2, Azure VM, GCP Compute Engine, AWS S3, Azure Blob Secondary: Azure SQL and AWS RDS Proficiency in scripting languages such as Python, PowerShell, Go, or JavaScript. Excellent problem-solving capabilities, able to troubleshoot complex technical issues and deliver scalable solutions. Experience conducting benchmarks and performance testing on enterprise systems (preferred). Demonstrated sales acumen, capable of articulating technical value to C-level executives and technical audiences including database administrators. Strong cross-functional collaboration skills with sales, engineering, and product management. Exceptional communication skills, including compelling presentations and clear, concise writing. Proven experience with data center hardware/software, cloud platforms, data security solutions, IaaS, PaaS, or hypervisor software. Self-motivated and results-driven, comfortable working remotely with a high degree of autonomy. Willingness to travel approximately 20%-50% of the time. #LF-SF1 Join Us in Securing the World's Data Rubrik (NYSE: RBRK) is on a mission to secure the world s data. With Zero Trust Data Security , we help organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications. We help organizations uphold data integrity, deliver data availability that withstands adverse conditions, continuously monitor data risks and threats, and restore businesses with their data when infrastructure is attacked. Qualification : Bachelors degree or equivalent practical experience.
Data Privacy Compliance Specialist
Rubrik
Data Privacy Compliance Specialist Location: Bangalore, India Office About the Team Rubrik s Legal Team is at the heart of our mission to secure the world s data. We provide essential guidance across contract management, intellectual property, employment law, privacy, trade compliance, and litigation. Our team thrives on open debate, innovation, and ownership, contributing to building an iconic company. Rubrik is growing rapidly and evolving join us to be unstoppable, together. About the Role Rubrik is looking for a Data Privacy Compliance Specialist to strengthen and manage our global privacy program. The ideal candidate will have hands-on experience with privacy management accountability frameworks (PMAF), compliance auditing, and implementing data protection practices aligned with evolving global regulations. This role requires working collaboratively across procurement, engineering, product management, legal, and information security teams worldwide to maintain compliance and mitigate privacy risks. What You ll Do Conduct internal and coordinate external privacy audits as needed. Assess and monitor privacy compliance of third-party vendors and service providers. Continuously review data handling practices to ensure compliance with internal policies and global regulations. Develop, maintain, and enforce data privacy policies and procedures aligned with legal requirements and business objectives. Maintain detailed documentation to demonstrate compliance and accountability. Manage and update an inventory of personal data processing activities, including data flows and classifications. Oversee cross-border data transfer mechanisms ensuring adherence to applicable privacy laws. Lead internal privacy reviews, supporting engineering and data governance teams with data mapping, documentation, and privacy impact assessments. Collaborate with teams to implement privacy risk mitigation solutions while ensuring regulatory adherence. Develop and deliver privacy training to internal stakeholders to raise awareness and ensure compliance with privacy responsibilities. Experience You ll Need Minimum 3+ years of experience in data privacy compliance, preferably with exposure to Privacy Management Accountability Frameworks (PMAF). Strong knowledge of global data protection regulations such as GDPR, CCPA, CPRA, and relevant industry standards. Proven expertise in data mapping, risk assessments, and conducting privacy audits. Excellent communication and stakeholder engagement skills across diverse teams. Certifications such as CIPP-E, CIPM, CIPT, CISSP preferred; Juris Doctor (JD) is a plus. Skills Required Deep understanding of IT, SaaS, and cloud provider compliance challenges. Solid knowledge of information security principles and best practices. Proficiency with privacy management tools like OneTrust for data mapping and assessment automation. Basic understanding of cookies and marketing technology systems. Ability to clearly articulate complex privacy and security concepts to both technical and non-technical audiences. Join Us in Securing the World's Data Rubrik (NYSE: RBRK) is on a mission to secure the world s data with Zero Trust Data Security . Our platform leverages machine learning to secure enterprise, cloud, and SaaS data, helping organizations ensure data integrity, availability, risk monitoring, and rapid recovery from cyberattacks and operational disruptions.
Senior Information Security Analyst - Data Governance
Rubrik
Senior Information Security Analyst Data Governance Location: Bangalore, India About the Team The Information Security (InfoSec) team at Rubrik strengthens company-wide security through initiatives, tools, and processes that protect data and systems. They also oversee security monitoring, incident response, and educate employees on best practices to secure Rubrik s information assets. Role Overview This role focuses on data governance and security review throughout the Software Development Lifecycle (SDLC) to ensure sensitive data is properly protected. You will collaborate cross-functionally with Legal, Engineering, Product, and IT teams, while also supporting the Security Operations Center (SOC) with expert guidance on data governance during incident response. Key Responsibilities Perform data governance and security reviews during SDLC for new products and features. Manage and document metadata, including data lineage, ownership, and definitions. Conduct audits and assessments to ensure compliance with data governance standards. Maintain strong relationships and communication with internal stakeholders to facilitate governance adherence. Act as a subject matter expert for SOC, supporting incident response from a data security perspective. Support training and awareness programs on data governance policies and best practices. Develop and maintain governance documentation, policies, and procedures. Identify and escalate data governance risks with actionable recommendations. Experience & Qualifications Required: Bachelor s or Master s degree in Information Security, Data Analytics, or related field. 3 5 years in information security, data security, or data governance roles. Strong understanding of data security principles and frameworks (e.g., NIST). Excellent communication, presentation, and documentation skills. Project management skills to lead governance projects. Ability to adapt quickly and maintain professionalism in dynamic environments. Preferred: Certifications: CISSP, CISM, CDPSE, Security+ (or similar). Experience with data governance tools and metadata management. Knowledge of data privacy regulations: GDPR, CCPA, HIPAA. Experience supporting or collaborating with SOC/incident response teams. Strong analytical and problem-solving skills, especially with complex data. Familiarity with cloud-based data security solutions. Rubrik leads in Zero Trust Data Security , providing cutting-edge data protection across enterprise, cloud, and SaaS environments. This role offers an impactful chance to enhance data governance and security in a mission-critical, rapidly evolving tech company. Qualification : Bachelors or Masters degree in Information Security, Data Analytics, or related field.
Security Operations Analyst
Danaher Corporation
Join Our Team as a Security Operations Analyst Location: Bangalore, India (On-site) Department: Information Security At Cytiva, we are advancing the future of therapeutics from discovery to delivery. As a leading global provider of technology and services that help researchers and pharmaceutical companies develop and manufacture life-saving treatments, our work is integral to shaping the future of healthcare. We are seeking a Security Operations Analyst to join our global Information Security Team in Bangalore. In this key role, you will be at the forefront of protecting our digital assets and infrastructure by monitoring, analyzing, and responding to security incidents. By proactively identifying threats and vulnerabilities, you will help minimize risk and ensure business continuity. What You ll Do Lead Security Incident Response: Conduct advanced security incident analysis and digital forensics to identify and mitigate threats. Lead investigations into malware, network traffic anomalies, and endpoint detection. Provide Expertise: Guide and mentor L1 and L2 SOC analysts, enhancing the quality of security alerts and incident handling. Optimize Security Tools: Collaborate with engineering teams to fine-tune SIEM tools (e.g., Splunk, Microsoft Sentinel, Elastic Security) and other security technologies for improved detection and response. Proactive Threat Hunting: Identify hidden threats within the organization through threat hunting activities, reducing the potential attack surface. Enhance Security Posture: Partner with other IT and security teams to strengthen the overall security posture, ensuring resilient systems and infrastructures. Post-Incident Reporting: Produce detailed incident reports and provide recommendations for security improvements, leading post-incident reviews with cross-functional teams. Who You Are Experience: Minimum of 5+ years in a corporate IT environment, including at least 2 years in an L3 or senior analyst role. Security Knowledge: Deep expertise in security frameworks such as MITRE ATT&CK, NIST, CIS Controls, and ISO 27001. Technical Skills: Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, ArcSight) and EDR/XDR solutions. Vendor certifications are a plus. Incident Response Expertise: Strong background in incident response, threat hunting, and forensic investigations. Cloud Security Knowledge: Familiarity with cloud security platforms (AWS, Azure, Google Cloud) and modern attack techniques. Certifications like OSCP, CEH are advantageous. Additional Skills That Would Be a Plus: Scripting & Automation: Proficiency in scripting (e.g., Python, PowerShell, Bash) to automate security processes and improve SOC workflows. Specialization: Expertise in EDR, SIEM, UBA, DLP, or Data Security. OT Environments: Experience with Operation Technology (OT) environments is an advantage. Innovative Culture: Join a dynamic, global team dedicated to advancing healthcare through technology and innovation. Impactful Work: Your role will directly contribute to the security and integrity of vital technologies used in the life sciences industry. Global Collaboration: Work with cross-functional teams around the world, contributing to an organization's critical security initiatives. Growth Opportunities: Benefit from continuous learning, career development, and the chance to make a tangible impact on both the organization and the industry. Apply now and be part of a team that is dedicated to ensuring the security of life-saving technologies.
Security Engineer
Danaher Corporation
Join Our Team as a Security Engineer Location: Bengaluru, India (On-site) Department: Global Information Security Reports to: Director of Information Security APAC At Cytiva, we are dedicated to advancing future therapeutics from discovery to delivery. As part of our Global Information Security Team, you ll work at the forefront of securing the systems, applications, and infrastructure that power critical healthcare solutions. Join us and play a key role in designing and implementing secure, resilient systems that ensure business continuity and safeguard our digital assets. What You Will Do Secure Architecture Design: Assist in developing and implementing secure architecture solutions for systems, applications, and infrastructure. Threat Modeling & Risk Assessment: Perform threat modeling and support security risk assessments to proactively identify vulnerabilities and mitigate potential threats. Design Reviews: Participate in security design reviews for applications and infrastructure across various environments, ensuring security best practices are followed. Security Technology Implementation: Deploy and manage enterprise security technologies, including Identity and Access Management (IAM), Data Loss Prevention (DLP), and Mobile Device Management (MDM). Regulatory Compliance: Ensure alignment with regulatory compliance and audit requirements, supporting the organization in maintaining secure, compliant systems. Who You Are Education: Bachelor s degree in Computer Science, Information Security, Cyber Security, or a related discipline. Experience: At least 5+ years of experience in security engineering or architecture, including expertise in threat modeling, risk assessment, and security architecture principles. Security Technologies: Hands-on experience with security technologies such as IAM, SIEM, EDR, DLP, and MDM. Cloud Security: Familiarity with cloud technologies (e.g., AWS, Azure, GCP) and cloud security best practices. Regulatory Compliance: Experience with frameworks and regulatory standards such as ISO 27001, NIST, and CIS Controls. Travel, Motor Vehicle Record & Physical/Environmental Requirements Travel: Ability to travel globally up to 10% of the time to support regional and global security initiatives. It Would Be a Plus If You Also Have: Experience conducting security design reviews for infrastructure, applications, and cloud environments. Expertise in implementing security standards and secure design patterns in alignment with frameworks like ISO 27001, NIST, and CIS Controls. Experience providing technical security advisory support to project teams, ensuring compliance with security and regulatory standards. Impactful Work: Your role directly influences the security and reliability of life-saving healthcare solutions used around the globe. Global Collaboration: Work with a diverse, dynamic, and global team of security experts dedicated to making a real difference. Career Development: Take advantage of opportunities for professional growth and continuous learning in a rapidly evolving industry. Apply now and join a global leader in advancing therapeutics and securing tomorrow s healthcare technologies. Qualification : Bachelors degree in Computer Science, Information Security, Cyber Security, or a related discipline.
Technical Consultant-security Intel & Operations Consulting Svcs
International Business Machines
Technical Consultant - Security Intel & Operations Consulting Services Location: Bangalore, Karnataka, India Job Type: Full-Time Experience Level: Senior Introduction: At IBM Consulting, we believe that work is more than just a job it's a calling. In the role of Technical Consultant - Security Intel & Operations, you will be part of our Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to both public and private sector clients across the globe. Our team helps clients to innovate, adopt new technologies, and improve their security posture. Your Role and Responsibilities: As a Senior SOC Analyst working within the 24/7 Cyber Fusion Center (CFC), your role will involve the proactive monitoring, triaging, analyzing, and escalating incidents in client environments. You will be tasked with utilizing various cyber operations tools and technologies to analyze data, detect security threats, and mitigate risks. Your expertise will contribute to maintaining the security integrity of client systems and ensuring efficient incident response. Key Responsibilities: Incident Monitoring & Analysis: Monitor and analyze security events using various cybersecurity tools like SIEM, IDS/IPS, Firewalls, network traffic logs, cloud platforms, and SOAR solutions to detect potential threats and mitigate risks. Perform event correlation using multiple data sources to understand the nature of security incidents and determine their impact on client environments. Threat Detection & Mitigation: Analyze alerts to identify active threats, perform root cause analysis, and apply appropriate mitigation techniques for both structured and unstructured environments. Evaluate security incidents across AWS and Azure environments, analyzing system, network, and email security events. Proactive Cybersecurity Measures: Conduct root cause analysis of security events and recommend actions to address vulnerabilities. Contribute to the development and constant improvement of SOC runbooks and playbooks to optimize security operations. Collaboration & Reporting: Work closely with cross-functional teams to escalate critical incidents and provide daily summary reports on activities relevant to cyber operations. Lead discussions on incident trends, perform cyber operations trend analysis, and report on findings to ensure continuous security enhancement. Continuous Improvement: Recommend improvements to automations, alert fidelity, and security controls to improve security efficacy and response time. Engage in team meetings, calls, and chats, contributing technical insights to enhance security strategies and tactics. Required Education and Experience: Education: Bachelor s Degree in Computer Science, Information Technology, Cybersecurity, or related fields. A Master s Degree is preferred but not required. Experience: Extensive experience working as a SOC Analyst or similar cybersecurity roles, especially in a 24/7 security operations center environment. Proficient in event analysis, log analysis, and network event management. Hands-on experience with cloud environments such as AWS and Azure, with a focus on cybersecurity threats and mitigations. Solid understanding of TCP/IP network security, modern attack techniques, exploitation methods, and operating system security. Preferred Technical and Professional Experience: Security Tools & Platforms: Experience with CyberArk, Azure SSO, and other enterprise security technologies. Knowledge of enterprise web technologies and cutting-edge security infrastructures. Familiarity with security automation tools and best practices for improving alert fidelity and security controls. Advanced Event & Threat Analysis: Proven ability to perform high-quality triage and in-depth analysis of security alerts. Experience in documenting incidents and escalating critical issues with appropriate cyber operations reports. Communication & Collaboration: Strong verbal and written communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders. Ability to actively contribute to team discussions, runbook creation, and security playbook updates. Global Impact: Join a globally recognized team working at the forefront of cybersecurity, helping to shape the future of digital security. Career Development: IBM offers a strong focus on professional growth, offering learning opportunities, certifications, and exposure to the latest security technologies. Collaborative Culture: Be part of a collaborative and dynamic team, working together to tackle the most pressing security challenges faced by businesses around the world. If you are ready to contribute to the security and resilience of leading global organizations, we invite you to apply and be a part of our forward-thinking security team at IBM Consulting. Qualification : Bachelors Degree in Computer Science, Information Technology, Cybersecurity, or related fields.
Security Engineer - II
Locus
Job Title: Security Engineer - II Location: Bangalore (On-site; full-time) About Locus: At Locus, we are redefining logistics decision-making with deep-tech solutions that drive efficiency, consistency, and transparency across industries like retail and FMCG/CPG. Founded in 2015 by Nishith Rastogi and Geet Garg, Locus has evolved from a women s safety geo-tracking app into a globally recognized logistics optimization platform. Our technology has empowered enterprises such as Unilever and Nestl to execute over a billion deliveries across 30+ countries. Guided by our commitment to innovation and sustainable growth, we transform complex supply chains into strategic growth enablers. Join us at Locus and be part of a team shaping the future of global logistics. Job Overview: Key Responsibilities: Conduct comprehensive threat modeling for applications, cloud infrastructure, and overall systems architecture. Perform secure code reviews and security assessments for web, Android, and iOS applications, with a strong focus on cloud infrastructure security. Proactively identify and mitigate vulnerabilities across platforms, collaborating with development and DevOps teams to implement secure solutions. Automate and streamline security processes, aligning with the principle that Complexity is the enemy of Security. Oversee Vulnerability Management and Patch Management processes, ensuring timely remediation. Design and implement robust security measures and contribute to Red Team activities, including assessments of cloud, network, wireless, physical, and social engineering scenarios. Take ownership of assigned tasks and drive the continuous improvement of security practices across the organization. Assist in setting up and maintaining monitoring systems to identify and respond to potential incidents in real time. Develop custom tools, scripts, and scanners to address unique security challenges and automate repetitive tasks. Provide architectural guidance for securing cloud-based applications and DevOps pipelines. Continuously stay updated on emerging security technologies and techniques, sharing knowledge with the team. Qualifications: 3-5 yrs experienced Sr security engineer. Expertise in cloud security (AWS, Azure, or GCP) with a strong understanding of securing applications and infrastructure in cloud environments. Proficiency in DevOps and DevSecOps practices, including secure CI/CD pipeline integration and automation. Strong knowledge of OWASP and SANS testing methodologies for identifying and mitigating security vulnerabilities. Good understanding of software security weaknesses, architecture vulnerabilities, and mitigation strategies. Hands-on experience in threat modeling, vulnerability assessments, and penetration testing. Proficiency in any scripting language - Python. Experience in developing or customizing tools, scanners, or extenders for specific security needs. Ability to work independently and collaboratively within a team to solve complex security challenges. Experience in implementing security monitoring systems for early incident detection. Strong problem-solving skills and the ability to think creatively to simulate attack scenarios. Certification in security-related fields (e.g., AWS Certified Security, CISSP, CEH, OSCP). Experience with container security and orchestration platforms like Kubernetes and Docker. Knowledge of Infrastructure as Code (IaC) tools like Terraform or CloudFormation. Familiarity with modern DevOps tools (e.g., Jenkins, GitLab, Ansible). Join Locus and become part of a visionary team that is redefining logistics through innovation and smart distribution. We provide competitive compensation, comprehensive benefits, and a collaborative environment where your expertise will drive both your growth and that of the organization. Locus is an equal opportunity employer dedicated to creating a diverse and inclusive workplace.
Data Security Operations Lead
Wipro Limited
Location: Bengaluru (Land of startups, street food, and tech sorcery) Region: IN (aka Incredible India ) Your Mission (Should You Choose to Accept) We re on the hunt for a Data Defender Extraordinaire who knows their way around DLP (Data Loss Prevention) tools like a wizard with their spellbook. Your daily grind? Guarding sensitive data like it s the last slice of pizza at a party. Intrigued? Read on! What You'll Be Juggling Spot the weak spots assess, predict, and eliminate risks lurking in the DLP universe. Play DLP DJ fine-tune policies, tweak settings, and generate reports that even Sherlock would envy. Be the first responder to DLP alarms, acting faster than your favorite food delivery app. Team up with data owners, legal, and compliance crews because data protection is a team sport. Stay thirsty for knowledge keep your data defense skills sharp and shiny. Continuously polish DLP workflows innovation doesn t sleep, and neither do threats. Tinker with tools troubleshoot, upgrade, and experiment with new DLP features like a mad scientist. Brainstorm like a boss find smarter ways to shield data and improve our security fortress. Identify sneaky gaps and plug them with creative solutions (your inner detective will love this). Rethink risk scores like a pro because risk is rarely a static creature. Support the incident response squad from escalations to triage, you ve got their backs. Suggest clever ways to uncover hidden sensitive data because secrets love hiding in plain sight. Partner with legal eagles & compliance gurus to keep our data playbook always regulation-ready. Research like a lone wolf and solve tech puzzles solo when needed (self-starter vibes are welcome). Who We re Looking For 5+ years fighting the good fight in InfoSec, especially around Governance, Risk & Compliance (GRC). DLP veteran you ve configured, deployed, troubleshot, and reported your way through multiple tools. Natural leader either as a subject matter expert or a hands-on lead. Analytical ninja you can spot security puzzles no one else can and know exactly when to hit the panic button. Fluent in Windows & Mac (bonus points if you speak Linux too). Words matter you can write a killer email and explain technical gobbledygook to non-tech folks without breaking a sweat. Bonus superpower: Integrity. We want someone who does the right thing, even when no one s looking. In short: If you can talk DLP like a pro, think like a hacker (but stay on the good side), and communicate like a TED speaker we should probably talk.
Cyber Security Analyst
Wipro Limited
Location: Bengaluru, India Role: Cybersecurity Analyst Company: Wipro Limited In a world where data is power, protecting that data is a mission, not just a job. As a Cybersecurity Analyst at Wipro, you ll be the guardian of sensitive information, spotting threats before they strike and building a resilient security posture for the organization. What You ll Do 1 Keep Customers Safe Deliver customer-centric cybersecurity, ensuring systems are fortified and risks are minimized. Monitor logs, security events, and access patterns to detect unusual, unauthorized, or illegal activity. Safeguard log sources, security configurations, and access controls. 2 Hunt, Analyze & Respond Track, analyze, and respond to security incidents escalated by L1 teams (24x7 rotational shifts). Perform log reviews and forensic analysis to understand unauthorized access or breaches. Use advanced analytics tools to identify emerging threat patterns. Conduct detailed root cause analysis and recommend specific, actionable improvements. 3 Be the Incident Commander Lead incident response efforts, coordinating with internal teams and customers for swift resolution. Plan and refine disaster recovery strategies for potential breaches. Create incident reports, dashboards, and analysis summaries to share insights and learnings. 4 Collaborate & Educate Work closely with internal technical leads, practice teams, and external customers to manage security concerns. Assist with internal and external audits, maintaining the information security risk register. Deliver cybersecurity awareness training for colleagues, turning every employee into a security ally. Provide hands-on advice and guidance on handling malicious emails, phishing attempts, and suspicious activity. Key Relationships Stakeholder Why You ll Work Together Internal Tech & Project Leads Regular updates, security reporting, coordination Security Intelligence Team For threat intelligence sharing and practice alignment Customers Direct support during incidents, ensuring transparency & fast resolutions What You Need to Succeed Technical Mastery Deep knowledge of Network Security devices, Firewalls, Endpoints, SIEM, Application Security, IDS/IPS, Vulnerability Assessments & Penetration Testing (VA/PT). Process Excellence Solid understanding of standards, processes, and automation tools to improve consistency and reduce risk. Communication & Collaboration Clear, effective communication skills you ll be the go-to person for explaining security risks to both techies and non-techies. How Your Success Will Be Measured Performance Area Measure Customer Focus Fast, effective resolution of security incidents for internal & external users Process Adherence 90-95% SLA compliance for response & resolution times Key Competencies Effective Communication Collaborative Working Execution Excellence Analytical Thinking & Problem Solving Reinvent Cybersecurity With Wipro This isn t just a job it s your chance to reinvent how organizations protect themselves in a rapidly evolving threat landscape. Join Wipro. Own the mission. Protect the future. Applications from people with disabilities are explicitly welcome.
Security Architect (identity & Access Management)
Blue Yonder
Job Title: Security Architect Identity & Access Management Location: Bengaluru, India Company: Blue Yonder Experience: 10+ years (including at least 5+ years in IAM) Education: Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field About Blue Yonder Blue Yonder is a recognized leader in AI-driven supply chain solutions, trusted by global brands to optimize their digital commerce and supply chain operations. We thrive on innovation, collaboration, and creating technology that powers smarter supply chains. As we continue to strengthen our security posture, we are seeking a Security Architect IAM to own, evolve, and safeguard Blue Yonder s identity landscape, ensuring consistent and compliant IAM controls across the organization s global footprint. Role Scope The Security Architect IAM will play a strategic and hands-on role in defining, implementing, and managing end-to-end identity and access management capabilities for Blue Yonder. This role requires deep technical expertise, leadership acumen, and a strong understanding of cloud-based identity ecosystems, ensuring secure access to critical systems and data. Key Responsibilities Define, develop, and manage a comprehensive IAM strategy, aligned with Blue Yonder s business goals, security policies, and compliance mandates. Design, implement, and enhance authentication, authorization, identity provisioning, access governance, and privileged access management (PAM) solutions, adopting best practices and industry standards. Conduct risk assessments to identify IAM vulnerabilities and define risk mitigation plans. Lead the technical implementation of IAM solutions and provide ongoing oversight to ensure operational excellence. Develop and enforce IAM policies, procedures, and standards to foster consistent security across the enterprise. Ensure IAM solutions adhere to regulatory requirements (GDPR, HIPAA, PCI DSS, SOX) and align with frameworks like NIST-CSF and ISO/IEC 27001. Integrate IAM capabilities with other security solutions (SIEM, endpoint security, etc.) for comprehensive protection. Establish and track Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for the IAM program. Stay updated with emerging threats, technology advancements, and industry trends, adapting the IAM strategy accordingly. Conduct maturity assessments and develop continuous improvement plans for the IAM service. Participate in security architecture reviews and work with enterprise architects to embed IAM controls into broader IT and product architecture. Partner with GRC teams to ensure all IAM-related risks are properly documented and managed, driving remediation where necessary. Collaborate with application development teams to ensure secure-by-design development and deployment of new applications. Required Qualifications & Experience 10+ years of overall cybersecurity experience, with at least 5+ years specifically focused on IAM. Strong background designing and implementing cloud-based IAM solutions (Azure AD, AWS IAM, GCP IAM). Proven expertise across: Active Directory, LDAP, SSO, MFA SAML, OAuth, OpenID Connect Privileged Access Management (PAM) and Identity Governance (IGA) Experience managing IAM programs across hybrid environments (on-prem & cloud). Strong understanding of: Secrets management, encryption, PKI, digital certificates Zero Trust Security models Experience identifying, analyzing, and remediating IAM-related security risks. Knowledge of regulatory requirements (GDPR, HIPAA, SOX, PCI DSS) and experience translating those into practical IAM controls. Demonstrated ability to lead complex IAM projects, collaborating across multiple business units and technical teams. Excellent communication and stakeholder management skills, capable of interacting with both technical teams and business leadership. Preferred Certifications CISM Certified Information Security Manager CISSP Certified Information Systems Security Professional Relevant Cloud Security certifications (Azure Security Engineer, AWS Security Specialty, GCP Security Engineer) Good to Have Skills Experience integrating IAM with: CI/CD pipelines and DevSecOps practices Containerized environments (Kubernetes, Docker) Exposure to distributed tracing and logging tools for IAM services. Experience automating IAM processes for provisioning, deprovisioning, and audit reporting. Be a part of a global leader in supply chain technology. Work on cutting-edge IAM technologies in a cloud-first environment. Partner with cross-functional teams to drive impactful security programs. Join a culture that values diversity, innovation, and continuous learning. Diversity & Inclusion at Blue Yonder At Blue Yonder, we celebrate diversity in all forms. Our DIVE (Diversity, Inclusion, Value & Equity) strategy ensures every associate feels included, respected, and empowered to bring their authentic self to work. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. Qualification : Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field
Principal Architect, Expert Services, Iam/iga
Saviynt
Principal Architect Identity Management Experience: 14+ Years Education: Bachelor s Degree in Engineering (or equivalent) About Saviynt Saviynt is an identity authority platform that empowers organizations to secure and manage digital access while enabling innovation. As businesses navigate digital transformation and increasing cyber risks, Saviynt s Enterprise Identity Cloud provides unparalleled visibility, control, and intelligence to protect users while ensuring seamless access to essential tools and technologies. Role Overview As a Principal Architect Identity Management, you will be responsible for designing, deploying, configuring, and implementing Saviynt s leading Identity Governance (IGA) solutions based on customer requirements. You will provide technical leadership, consulting expertise, and industry best practices to ensure seamless solution deployment while mentoring junior engineers. Key Responsibilities Strategic Leadership & Solution Architecture Provide thought leadership on IGA solutions, with a specific focus on Saviynt s technology. Develop best-in-class solutions that align with customer functional and non-functional requirements. Serve as a trusted advisor to customers, offering consulting expertise and strategic guidance. Deployment & Implementation Architect, design, and deploy Saviynt s Identity Governance solutions. Lead implementation and integration of Saviynt with critical applications and infrastructure. Ensure compliance with approved lifecycle methodologies, documentation standards, and testing protocols. Troubleshoot and resolve technical issues through debugging, research, and investigation. Collaboration & Technical Oversight Engage directly with customers, ensuring their success through expert guidance. Provide technical oversight and mentorship to mid-level and junior engineers. Train and develop top talent to become Saviynt technology experts. Collaborate with operations and product engineering teams to advocate for new features. Pre-Sales & Business Development Support Offer technical pre-sales support for direct and partner sales teams. Provide real-world expertise in creating solutions, proof of concepts, and implementations. Conduct competitive research to address and dispel customer objections effectively. Contribute to RFP responses and proposals as needed. Process Improvement & Compliance Ensure high-quality solution delivery within the defined timeline and budget. Stay updated with industry best practices, standards, and cybersecurity trends. Adhere to Saviynt s security & privacy policies (Data Classification, Access Control, Incident Response, etc.). What You Bring 14+ years of experience in Identity Governance & Access Management (IGA/IAM). Expertise in User Lifecycle Management, Provisioning, Reconciliation, Access Certification, SOD, and Cloud Security. Strong knowledge of Java/J2EE, SQL, REST/SOAP Web Services, and Directory Services. Experience in solution architecture, customization, and deployment of Identity Management products. Hands-on experience in direct customer interaction, consulting, and advisory roles. Strong technical presentation and communication skills. Proven problem-solving and analytical skills. Experience in pre-sales, RFP responses, and proposal writing. Preferred (Good to Have): Cybersecurity certifications: CISSP, CISA, CISM, CompTIA Security+, CEH, etc. Saviynt or equivalent IGA product certification. High-growth, Platform-as-a-Service (PaaS) company revolutionizing identity security. Tremendous learning opportunities through challenging yet rewarding projects. Collaborative & inclusive work environment where your impact is valued. Work with some of the world s leading enterprises on cutting-edge IAM solutions. Saviynt is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity, sexual orientation, disability, or veteran status. If you're an experienced IAM Architect with a passion for customer success and innovation, we d love to hear from you! Qualification : Bachelors Degree in Engineering (or equivalent)
Cybersecurity Leader - India Hub
Schneider Electric
Cybersecurity Portfolio Manager Location: Bengaluru, India About Schneider Electric Schneider Electric is a global leader in energy management and automation, driving digital transformation for efficiency and sustainability. With a presence in over 100 countries and revenues of ~ 25 billion (FY2016), our 144,000+ employees help customers optimize their energy and processes in safe, reliable, efficient, and sustainable ways. From simple switches to advanced automation systems, our technologies reshape industries, transform cities, and enrich lives. At Schneider Electric, we believe that Life Is On. Cybersecurity at Schneider Electric Cybersecurity is a core pillar of Schneider Electric s digital strategy, ensuring secure IT/OT convergence and enabling our partners and customers to thrive in today s digital economy. Our cybersecurity efforts focus on: Strong digital governance and risk management Robust risk prevention, detection, and response strategies Protection of high-value assets Comprehensive security metrics and compliance About the Role We are seeking an experienced Cybersecurity Portfolio Manager to lead our product security initiatives within the Energy Management (EM) Central CTO Office. This role is crucial in driving transversal security strategies, aligning regulatory, technical, and business teams, and ensuring our products meet the highest security and data protection standards. You will report to the VP of Cybersecurity Innovation and Architecture and collaborate closely with product security architects, security advisors, and key stakeholders across the organization. Key Responsibilities Product Security Management: Oversee security aspects of product development and implementation, ensuring compliance with industry standards and regulations. Governance, Risk, and Compliance (GRC): Ensure adherence to security frameworks, policies, and compliance requirements. Project Management: Lead security initiatives, managing resources, timelines, and budgets effectively. Stakeholder Collaboration: Act as a bridge between technical teams, regulatory bodies, and business units to align security objectives. Documentation & Reporting: Maintain security process documentation, dashboards, and reports to track security performance and compliance. Qualifications Required: Bachelor s degree in Computer Science, Information Security, or a related field. 4 6 years of experience in cybersecurity, with a focus on product security. Strong knowledge of security principles (IT and OT), GRC, and data protection. Experience in project management and leading cross-functional teams. Excellent communication skills, with the ability to simplify complex security concepts for non-technical stakeholders. Structured, detail-oriented, and highly organized. Ability to advocate for security best practices across the organization. Familiarity with security frameworks and standards (e.g., ISO/IEC 27001, NIST). Certifications such as CISSP, CISM, or CISA (preferred). Leadership & Soft Skills Strong presentation and cross-functional collaboration skills. Ability to organize and facilitate meetings and workshops. Adaptability to shifting priorities, deadlines, and challenges. Experience working in global, matrixed organizations. Problem-solving mindset with a proactive approach to risk identification and mitigation. Self-motivated with the ability to work independently and handle multiple tasks under pressure. Join us in shaping a secure digital future at Schneider Electric! Qualification : Bachelors degree in computer science, Information Security, or a related field.
Infosec Lead
Gameskraft
Infosec Lead Experience: 5-7 Years | Location: Bengaluru About Gameskraft: Founded in 2017, Gameskraft is one of India s fastest-growing online gaming companies. Our mission is to build a safe, secure, and responsible gaming ecosystem while delivering unmatched experiences through innovation and technology. As the industry s only ISO 27001 and ISO 9001 certified company, we set the highest benchmarks in security, design, and performance. Job Summary: We are seeking an experienced Infosec Lead to drive our security strategy, ensuring robust web security, application security, and compliance across the organization. You will be responsible for leading a team of security professionals, implementing best-in-class security measures, and ensuring compliance with industry regulations such as HIPAA, PCI-DSS, ISO, and GDPR. Key Responsibilities: Security Strategy & Program Management: Develop, implement, and maintain a comprehensive security program to safeguard company assets, systems, and data. Collaborate with cross-functional teams to integrate security into product development and business operations. Conduct risk assessments and vulnerability analyses to identify and mitigate security threats. Compliance & Regulatory Adherence: Ensure compliance with HIPAA, PCI-DSS, ISO, GDPR, and other relevant security frameworks. Maintain security certifications and drive adherence to regulatory standards. Develop and enforce security policies, standards, and procedures. Incident Response & Risk Management: Lead incident response efforts, including investigation, containment, and remediation. Continuously monitor security threats, emerging trends, and vulnerabilities to strengthen cyber resilience. Provide security guidance and risk analysis during product launches and infrastructure changes. Team Leadership & Stakeholder Collaboration: Lead and mentor a team of security professionals, fostering a culture of security awareness across the organization. Work closely with engineering, IT, legal, and business teams to embed security best practices. Present regular security reports and key performance metrics to senior management. What You Bring to the Table: Education: Bachelor s or Master s degree in Computer Science, Information Security, or a related field. Experience: 5-7 years of experience in information security, with a strong focus on web security, application security, and compliance. Proven track record in leading security teams and managing enterprise security programs. Technical Expertise: Strong knowledge of security technologies such as firewalls, IDS/IPS, SIEM, encryption, authentication protocols, and penetration testing tools. Experience with cloud security (AWS, Azure, GCP) and DevSecOps methodologies. Familiarity with secure coding practices and application security frameworks (OWASP, NIST, CIS Controls). Hands-on expertise in risk assessment, vulnerability management, and security architecture design. Certifications (Preferred): CISSP, CISM, CISA, CEH, or equivalent industry-recognized security certifications. Soft Skills & Leadership: Strong analytical and problem-solving skills. Excellent communication and stakeholder management abilities. Ability to influence and drive security initiatives across multiple teams. Work Culture at Gameskraft: Startup Environment: Fast-paced, ownership-driven culture where innovation and agility thrive. Impactful Work: Direct contribution to securing one of India s largest gaming platforms. Collaboration: Work alongside some of the best minds in the gaming and consumer internet industry. Data-Driven: Leverage analytics to enhance security posture and decision-making. Compensation & Benefits: Attractive Compensation & ESOPs Competitive salary with equity options. Health Insurance 5 Lakh medical cover for you and your family. Car Lease Policy Exclusive leasing options for employees. Relocation Benefits Assistance with moving to Bengaluru. Free Lunch & Stocked Pantries Enjoy great food while you work! Performance-Based Growth Transparent appraisals and rapid career progression. Join Us & Secure the Future of Gaming! If you re passionate about cybersecurity, risk management, and building secure digital ecosystems, we d love to have you on board. Apply now and be part of an exciting journey at Gameskraft! Qualification : Bachelors or Masters degree in Computer Science, Information Security, or a related field.
Senior Application Security Engineer
Tide Platform Limited
At Tide, we re building a finance platform to help small businesses save time and money. We offer business accounts and banking services alongside a comprehensive set of administrative solutions, from invoicing to accounting. Launched in 2017, Tide is trusted by over 1 million small businesses worldwide and is available to SMEs in the UK, India, and Germany. Headquartered in London, we have offices in Sofia, Hyderabad, Delhi, Berlin, and Belgrade, with a global team of 2,000+ employees. As we expand into new markets, we re constantly seeking passionate individuals to help us empower small businesses. About the Team The Security Engineering Team at Tide is divided into three core areas: Product Security, Threat Detection & Response, and Identity. Product Security (this role) focuses on embedding security throughout our product lifecycle, from secure design reviews and threat modeling to penetration testing, ensuring security is baked into every stage of development. Threat Detection & Response builds a robust detection and automation platform, proactively defending against emerging threats and making Tide resilient. Identity manages Tide s staff identity platform, ensuring secure access with modern strategies like zero trust and multi-factor authentication. Collaboration is central to our work standups, shared channels, and cross-functional projects keep us aligned and cohesive. About the Role We re seeking a Senior Product Security Engineer with a passion for application security and resilient software development. You ll be responsible for hunting vulnerabilities in our web and mobile applications, collaborating with engineering teams to remediate strategically, and ensuring security is seamlessly integrated into our development process. You ll be an advocate for security across the organization, mentoring engineers, and introducing the latest security tools and trends. As a Senior Product Security Engineer, you will: Dive deep into mobile and web technologies to proactively hunt for vulnerabilities. Secure cloud-native applications, ensuring best practices across Tide s AWS cloud environment. Perform threat modeling and guide teams in secure design principles to prevent vulnerabilities. Remediate vulnerabilities through strategic initiatives and hands-on patching. Act as a subject matter expert across a range of security areas, particularly application security. Mentor and coach junior engineers, sharing your expertise to raise the security bar. Integrate security into our CI/CD pipelines, leveraging automation to catch vulnerabilities early. What We re Looking For: Extensive experience in Application Security (AppSec), with a deep understanding of concepts like Secure Enclave, URL Schemes vs. Universal Links, and presigned URLs in S3. Proficiency with tools like Burp Suite (bonus points if you ve built custom extensions). Excellent communication skills able to clearly articulate vulnerabilities and advocate for their remediation. Hands-on experience with cloud-native applications and consistently applying security best practices. Ability to write proof-of-concept (POC) scripts to demonstrate findings and their potential impact. A passion for the security community public speaking, blogging, bug bounties, or sharing your work on GitHub is a plus. Our Tech Stack: Cloud Environment: 100% containerized on AWS EKS. Infrastructure as Code (IaC): Managed via Terraform and Terragrunt. Deployment: GitOps with Argo CD, supported by Helm and Crossplane. CI/CD: GitHub Actions and all source code hosted on GitHub. What You ll Get in Return: Competitive salary Health Insurance (Self & Family) Term & Life Insurance OPD Benefits Mental Well-being Support through Plumm Learning & Development Budget WFH Setup Allowance Leave Benefits: 15 Privilege Leaves, 12 Casual Leaves, 12 Sick Leaves, 3 Paid Days Off for Volunteering or L&D Activities Stock Options Tidean Ways of Working: We support a flexible workplace model, balancing remote and in-person work to meet the needs of different teams. While remote work is encouraged, we believe in face-to-face interactions to foster innovation and strengthen team spirit. Our offices are hubs for collaboration and community-building. Diversity & Inclusion at Tide: At Tide, diversity and inclusion are at the heart of our culture. Our Tideans come from diverse backgrounds, bringing unique perspectives that help us build products that resonate with our members. We are committed to creating an environment where everyone s voice is heard, and all individuals regardless of ethnicity, gender identity, sexual orientation, or disability are welcomed and celebrated. We are One Team, fostering transparency and inclusion in everything we do.
1 - 20 of 0 jobs
* No exact matches found. Showing closest results insteadNo results found
Modify search criteria or create an alert to get relevant jobs as soon as they’re posted