Find Your Dream Cyber Security Job in India

Company Description

Meritshot is a career transformation platform dedicated to helping individuals unlock high-growth opportunities in fields such as Cyber Security, Investment Banking, Finance, Software Development, and Data Science. Meritshot provides a structured curriculum developed by industry leaders, 1:1 mentorship, personalized feedback, and 100% job assistance to its learners. Partnered with over 400 hiring companies, Meritshot is committed to enabling career success through hands-on learning and expert guidance. Whether aiming to join leading tech firms or finance roles, Meritshot equips individuals to achieve their career aspirations more effectively and efficiently.

Role Description

This is a full-time, on-site role for a Cybersecurity Intern located in Noida. The Cybersecurity Intern will be responsible for identifying, analyzing, and addressing potential cybersecurity threats, vulnerabilities, and risks. Day-to-day responsibilities include conducting assessments of application, network, and information security, assisting in implementing cybersecurity measures, and collaborating with the team to improve security protocols and safeguard sensitive data. The role offers hands-on experience and professional growth in the cybersecurity domain.

Qualifications

• Knowledge of Application Security, including identifying vulnerabilities and secure coding practices
• Understanding of Cybersecurity concepts such as threat detection, prevention, and response strategies
• Familiarity with Network Security practices, including securing systems, firewalls, and intrusion detection
• Basic knowledge of Information Security and data protection standards and procedures
• Passion for the field of Cybersecurity and a willingness to learn and adapt
• Strong analytical and problem-solving skills with attention to detail
• Currently pursuing or recently completed a degree in Cybersecurity, Computer Science, Information Technology, or a related field

Salary: 20-25k Monthly Stipend for 6 Months and then PPO upto 6-9LPA as per performance.

Contact : or email at

We have opportunities for different levels in Pune - Staff, Senior, Principal, Sr. Principal (5 - 18 yrs) roles and we are looking for candidates with C OR C++ development experience in Network/Cyber Security OR Networking domain background for Pune location.

Responsibilities:

• Design and develop scalable database solutions for complex engineering problems.
• Able to rapidly develop prototypes to identify the best set of technologies and toolkits to use for new feature development.
• Coordinate and be able to resolve issues across the entire stack - hardware, software, application, and network.
• Review entire environment and execute initiatives to reduce failures, and improve overall performance.

Requirements:

• 8+ years of experience in C/C++ systems software development.
• Expertise in networking OR network security concepts (TCP/IP, IPsec, VPN, routing, NAT, DPI, etc.).
• Experience designing multi-threaded, high-performance, and low-latency systems.
• Understanding of OS internals, memory management, concurrency, and networking stacks.
• Experience with DPDK - Data Plane Development Kit, NetFilter or equivalent frameworks is a plus.
• Excellent analytical, debugging, and performance-tuning skills.
• Strong communication skills and ability to collaborate across teams and roles

Education and Experience:

• 8 years of related experience with a Bachelor's degree; or minimum 3 years and a Master's degree; or a PhD with 1 year experience; or equivalent experience preferred.
• Degree in Computer Science, Engineering, or related field preferred.
• Familiarity with Agile Software Development Methodologies preferred.
• Experience with AWS infrastructure preferred.

Job Role & Requirements:

• Business Development experience, able to work with Sales teams to generate opportunities for Security Product offerings.
• Design, Presents, demonstrates the Network Architecture for the Security domain(s) and provide technical consulting to Mid, Enterprise and Government customers.
• Required to understand customer requirements and provide consultation / design on the architecture and solution.
• Define security requirements for products and platforms.
• Work with company leaders to develop long term vision, technology road map, and annual goals for the Cyber Security Practice. Build a distinguished portfolio of advanced cyber security services. Develop intellectual property, including methodologies, solutions, accelerators and tools to enable the practice to be recognized as a leader in the field of cyber security
• Demonstrated knowledge of information security, computer forensics and data analysis; practices & procedures related to the investigation and response to network/computer intrusions and data theft. Experience in planning and implementing risk mitigation strategies relating to: data loss prevention, security incident and event management, identity and access management, role-based management, strong authentication, encryption, source code analysis, penetration testing, application and system hardening, firewall management and logical network segmentation.
• Evaluate new technologies and processes that enhance security capabilities.
• Conduct Thorough Assessment on the Deliveries from Cyber Security Perspectives.
• Business Development experience, able to work with Sales teams to generate opportunities for Security Business. Able to drive Technical & Sales on various Security Technology offerings.
• Able to drive new technology solution and need to have market intelligence on Security as a practice
• Proven experience in managing the complete delivery lifecycle of security engagements, right from the pre-sales stage starting with the identification of opportunities and initial scoping through to the final delivery and signoff. Should have also implemented programs to provide post-cutover maintenance and operations support.
• Must possess adequate knowledge of industry best practices and tools like: Malware Analysis, Memory Analysis, HBGary Responder, Network Traffic Collection and Analysis and Sandboxing, EnCase, F-Response, FTK, Helix and Paraben.
• Understand complete discovery of customer environment and able to convert an opportunity by coordinating between Sales, Commercial, Partners etc.
• Understanding of product portfolio of various OEMs e.g., Cisco, Juniper, Fortinet, Symantec, Mcafee, Bluecoat etc.
• Able to Work on Funnel review, partner mindshare, drive higher discounts, drive commercial negotiations and closure of opportunity.
• Responsible for the backend process like P&L, Cost optimization, Marketing etc.
• Driving the funnel and initiatives with the OEMs and partners

Desired Candidate Profile:

• Candidate must possess at Bachelor Degree Engineering in any discipline. Masters (MBA/ME) will be added advantage.
• Individual contributor with 7 to 12 years of working experience in Security Presales/Business Development and/or IT Infrastructure.
• Should have excellent knowledge in creating High level & Low level Design document, proposal writing skills, Bill of Material Preparation and writing Scope of Document.
• Excellent Interpersonal & Collaboration Skills
• Technology Certifications like CISSP, CISM, CISA, Certified Ethical Hacker (CEH) etc. are mandatory
• Must be able to learn new technologies quickly.
• Hunger to stretch and outperform.
• Leadership skills to lead an informal matrix team to accomplish the objective

JD:

Postmarket Surveillance and Continuous Improvement

• Perform postmarket cybersecurity surveillance, including incident analysis, trend evaluation, and integration of lessons learned into the product development lifecycle.
• Coordinate and execute incident response activities, including detection, containment, root cause analysis, remediation, and regulatory reporting when applicable.
• Maintain audit-ready cybersecurity documentation, metrics, and lifecycle records.
• Contribute cybersecurity input to product roadmaps, change impact assessments, and regulatory submission dossiers.

Vulnerability and Risk Management

• Continuously monitor and assess cybersecurity vulnerabilities affecting marketed critical-care devices.
• Lead vulnerability handling processes, including triage, remediation tracking, and verification of corrective actions.
• Evaluate and document cybersecurity risks, define appropriate mitigations, and ensure alignment with Quality System and regulatory requirements
• Support residual risk evaluation and provide cybersecurity input for design and regulatory justifications.

Patching, Updates, and Testing

• Plan and manage routine security updates and patches to maintain ongoing device protection and compliance.
• Ensure periodic cybersecurity testing and verification activities are performed to confirm product security and functional integrity.
• Verify the effectiveness of remediation and update deployments in collaboration with R&D, Quality, and Field Service teams.

Disclosure and Communication

• Manage the Coordinated Vulnerability Disclosure (CVD) process with researchers, customers, and regulators to ensure transparent and compliant communication of security findings.
• Communicate forthcoming remediations, patches, and updates to customers clearly and proactively, providing appropriate implementation guidance.
• Location-Pune

Interested candidate can mail at

Cybersecurity Specialist - AMI / Smart Grid

We are looking for an experienced Cybersecurity Specialist to strengthen security across AMI, MDM, DCRC, Billing, and utility IT/OT systems. The role focuses on risk assessment, compliance, governance, and incident response within critical infrastructure environments.

Key Responsibilities

Cybersecurity Risk & Compliance

• Identify vulnerabilities, threat exposures, and compliance gaps aligned with national cybersecurity frameworks and ISO 27001.
• Conduct cybersecurity maturity assessments across AMI, MDM, DCRC, billing systems, and control centre platforms.
• Prepare Cybersecurity and Data Protection Framework Reports.

Security Controls Evaluation

• Evaluate and strengthen authentication, encryption, access control, and network security mechanisms.
• Review system architecture for secure integration between AMI head-end, MDM, billing systems, and Load Management Systems.
• Assess risks related to automated disconnection/reconnection processes.

Governance & Vendor Security

• Define cybersecurity governance structures and roles across IT, operations, and third-party vendors.
• Establish minimum cybersecurity and data protection requirements for vendors and contractors.
• Conduct third-party risk assessments and compliance audits.

Incident Response & Resilience

• Develop and maintain a Cybersecurity Incident Response Plan integrated with Load Management System operations.
• Coordinate incident simulations, table top exercises, and recovery testing.
• Support SOC integration and threat monitoring improvements.

Reporting & Documentation

• Develop policies, procedures, and risk registers.
• Present risk findings and mitigation strategies to management.
• Maintain compliance documentation and audit readiness.

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field.
• Minimum 7 years of experience
• 5 years in cybersecurity (utility / smart grid / critical infrastructure preferred)
• Strong knowledge of ISO 27001, NIST, IT/OT security
• Experience with AMI / SCADA / MDM environments
• Relevant certifications (CISSP / CISM / ISO 27001) preferred

Cyber Security Engineer

Company Overview

BDx is Asia's fastest-growing data center platform, delivering colocation, build-to-suit, managed services, and interconnection solutions for hyperscalers, large enterprises, and AI customers. Operating across high-growth markets-including Indonesia, Hong Kong, Singapore, and Taiwan-BDx currently boasts 110+ MW of contracted capacity, with a land bank scalable up to 750 MW.

What sets BDx apart is our integration of AI-optimized infrastructure, energy-efficient design, and sovereign-grade compliance-enabling future-ready, sustainable operations. We go beyond traditional data centers by offering tailored solutions powered by renewable resources.

BDx is a portfolio company of I Squared Capital, a leading global infrastructure investor with a focus on digital infrastructure, energy, utilities, and transportation.

Learn more:

Role Summary

The Security lead will provide security incident response and readiness as part of a 24x7 Security Operations Centre within and in support of the IT Infrastructure and Operations team. Support global vulnerability management processes including OS and infrastructure patching, hardening and testing efforts. Operate security related tools (HIDS, NIDS, IPS, Analysers, Scanners, etc.) to identify active threats, attacks, vulnerabilities, exposures, etc., and prioritize for activity within the team. Assist in speedy identification of mitigation/remediation solutions.

Key Responsibilities

• Security Operations & Incident Response
• Monitor and respond to security incidents within a 24x7 Security Operations Center (SOC).
• Investigate, analyze, and mitigate security threats using SIEM, EDR, IDS/IPS, and SOAR solutions.
• Develop and maintain incident response playbooks and security procedures.
• Perform forensic analysis and root cause investigation for security breaches.
• 2. Vulnerability & Risk Management Conduct regular Vulnerability Assessments (VAPT) and security audits.
• Prioritize and implement security patches for OS, networks, and applications.
• Support hardening efforts for IT systems and infrastructure.
• 3. Security Tools & Compliance Manage and maintain security tools such as WAF, SIEM, DLP, IAM, and endpoint protection.
• Ensure compliance with security frameworks like ISO 27001, PCI-DSS, and NIST.
• Assist in security awareness training and best practices.
• Support internal & external audits by providing necessary security documentation.
• 4. Threat Intelligence & Continuous Improvement Identify emerging threats and attack vectors impacting enterprise security.
• Recommend and implement mitigation strategies to enhance cybersecurity posture.
• Collaborate with global security teams to align on security best practices.

Candidate Profile

Bachelor's degree in Computer Science, Information Security, or related field.

10+ years of experience in cybersecurity, SOC operations, or IT Security.

Strong knowledge of cloud security (AWS, Azure, GCP) and on-prem security.

Experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies.

Hands-on experience in penetration testing and vulnerability management.

Familiarity with security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, etc.).

Certifications such as CISSP, CISM, CEH, OSCP, or Security+ are a plus.

Analytical mindset with strong problem-solving skills.

Ability to work under high-pressure situations and respond to incidents in real time.

Excellent communication skills to report security risks and incidents effectively.

Proactive approach to identifying and mitigating security threats.

At BDx, we believe that our success lies in the hands of our talented and dedicated employees. Together, we are shaping the future of the data center industry and making a positive impact on the world.

Cyber Security Engineer

Company Overview

BDx is Asia's fastest-growing data center platform, delivering colocation, build-to-suit, managed services, and interconnection solutions for hyperscalers, large enterprises, and AI customers. Operating across high-growth markets-including Indonesia, Hong Kong, Singapore, and Taiwan-BDx currently boasts 110+ MW of contracted capacity, with a land bank scalable up to 750 MW.

What sets BDx apart is our integration of AI-optimized infrastructure, energy-efficient design, and sovereign-grade compliance-enabling future-ready, sustainable operations. We go beyond traditional data centers by offering tailored solutions powered by renewable resources.

BDx is a portfolio company of I Squared Capital, a leading global infrastructure investor with a focus on digital infrastructure, energy, utilities, and transportation.

Learn more:

Role Summary

The Security lead will provide security incident response and readiness as part of a 24x7 Security Operations Centre within and in support of the IT Infrastructure and Operations team. Support global vulnerability management processes including OS and infrastructure patching, hardening and testing efforts. Operate security related tools (HIDS, NIDS, IPS, Analysers, Scanners, etc.) to identify active threats, attacks, vulnerabilities, exposures, etc., and prioritize for activity within the team. Assist in speedy identification of mitigation/remediation solutions.

Key Responsibilities

• Security Operations & Incident Response
• Monitor and respond to security incidents within a 24x7 Security Operations Center (SOC).
• Investigate, analyze, and mitigate security threats using SIEM, EDR, IDS/IPS, and SOAR solutions.
• Develop and maintain incident response playbooks and security procedures.
• Perform forensic analysis and root cause investigation for security breaches.
• 2. Vulnerability & Risk Management Conduct regular Vulnerability Assessments (VAPT) and security audits.
• Prioritize and implement security patches for OS, networks, and applications.
• Support hardening efforts for IT systems and infrastructure.
• 3. Security Tools & Compliance Manage and maintain security tools such as WAF, SIEM, DLP, IAM, and endpoint protection.
• Ensure compliance with security frameworks like ISO 27001, PCI-DSS, and NIST.
• Assist in security awareness training and best practices.
• Support internal & external audits by providing necessary security documentation.
• 4. Threat Intelligence & Continuous Improvement Identify emerging threats and attack vectors impacting enterprise security.
• Recommend and implement mitigation strategies to enhance cybersecurity posture.
• Collaborate with global security teams to align on security best practices.

Candidate Profile

Bachelor's degree in Computer Science, Information Security, or related field.

10+ years of experience in cybersecurity, SOC operations, or IT Security.

Strong knowledge of cloud security (AWS, Azure, GCP) and on-prem security.

Experience with firewalls, IDS/IPS, SIEM, EDR, and encryption technologies.

Hands-on experience in penetration testing and vulnerability management.

Familiarity with security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, etc.).

Certifications such as CISSP, CISM, CEH, OSCP, or Security+ are a plus.

Analytical mindset with strong problem-solving skills.

Ability to work under high-pressure situations and respond to incidents in real time.

Excellent communication skills to report security risks and incidents effectively.

Proactive approach to identifying and mitigating security threats.

At BDx, we believe that our success lies in the hands of our talented and dedicated employees. Together, we are shaping the future of the data center industry and making a positive impact on the world.

Key Responsibilities

• Perform continuous security testing of web applications and REST APIs during development, testing, and pre-release phases
• Conduct manual and automated application security testing to identify vulnerabilities
• Review application logic related to authentication, authorization, session management, and input validation
• Collaborate directly with developers to explain security findings and recommend effective remediation strategies
• Track security issues from discovery through remediation using internal ticketing or tracking systems
• Support production incident investigations, root cause analysis, and post-incident reviews
• Assist in improving secure development practices and early-stage security reviews
• Prepare clear and actionable security documentation and reports for engineering teams
• Help maintain alignment with common application security standards and best practices

Required Skills & Qualifications

• 3-5 years of hands-on experience in application security or cybersecurity roles
• Strong understanding of web application and API security concepts
• Experience with vulnerability assessment and triage
• Working knowledge of secure code review principles
• Familiarity with OWASP Top 10 vulnerabilities
• Experience using security testing tools such as:
• Burp Suite
• OWASP ZAP
• Nessus or OpenVAS
• Basic scripting or programming knowledge (Python and/or JavaScript preferred)
• Understanding of incident response basics and log analysis

Cyber Hygiene Assurance

Location: Pune (Kharadi)

Experience: 5 to 12 Years

Notice Period: Immediate

Your role

Do you have the expertise to control the quality of cyber security products? Are you interested in reviewing KPCI (Key Performance and Control Indicators) and KPC (Key Procedural Controls)? Are you a committed and visionary team player with a logical mind-set?Are you motivated to work in a complex, diverse and global environment?

We're looking for a Cyber Hygiene Assurance to

• Develop and maintain effective methods to review Cyber Hygiene KPCI Assessments.
• Identify and report gaps using CHA methodologies
• Collaborate with Product Owners on how to remediate identify discrepancies
• Investigate scanning issues across infrastructure, applications, and systems, and establish appropriate corrective actions
• Collaborate with cross-functional groups, including Network teams, CMDB Owners, CISO, and Risk, in the risk reduction
• Demonstrate proficiency with a range of technologies and tools, including CMDB, Azure Cloud, and vulnerability scanners
• Participate in reviewing processes and implementing improvements, including automation
• Conduct technical quality assessments, such as analyzing false positives and reviewing risk ratings

Your expertise

You have:

• Ten years of experience in Information Technology or related field
• Ideally three to five years of experience in Cyber Security
• Good knowledge of Azure, Network, IT Infrastructure
• Good SQL, Excel, Confluence, Gitlab skills
• Documentation skills
• Experience with security processes e.g. vulnerability scanning or configuration management
• Experience with incident management and security monitoring tools
• Knowledge of risk management practices and regulatory requirements
• Skills to design, plan and deliver solutions in a large-scale enterprise environment
• Confident communicator that can explain technology to non-technical audiences

Required Qualifications

• Engineering Degree in CS, E&TC, EE, Cybersecurity-or equivalent
• experience - 7-12 years
• Industry - Automotive, Information Technology, Mechatronics, Automation
• Strong hands-on with embedded/automotive protocols (CAN, UDS, DoIP, SOME/IP) and industrial/IoT protocols (Modbus, OPC UA, PROFINET, EtherNet/IP; plus wired/wireless Fieldbus/LoRa/WirelessHART).

Proficiency in tools: CANoe/CANalyzer/SocketCAN; Burp, Metasploit, Nmap, Wireshark.

Key Responsibilities

• Plan and perform end-to-end penetration tests on ECUs, gateways, TCUs, infotainment, ADAS-related ECUs, IoT and medical/industrial devices.

Assess in-vehicle networks (CAN, LIN, FlexRay, Automotive Ethernet) and design realistic attack chains across vehicle, mobile, cloud/back-end

• Align methods with ISO/SAE 21434, UNECE R155/R156, NIST SP 800, OWASP/ASVS/MAS/MASTG, ISA/IEC 62443.
• Collaborate with firmware, hardware, cloud, DevOps, and systems teams; present risks and remediation to customers and stakeholders.

Drive architecture reviews, threat modeling (TARA) and attack surface analysis; contribute to work products and reports

• Conduct firmware/boot-chain testing (secure boot, OTA) and embedded Linux/RTOS security reviews.
• Execute hardware-level testing (JTAG/UART/SPI/I C, flash extraction, debug interface analysis) and support SDR/RF assessments.
• Lead security architecture reviews, threat modeling (TARA), and attack-surface reduction across platforms.

Set and evolve methodologies aligned to ISO/SAE 21434, UNECE R155/R156, NIST SP 800, OWASP/ASVS/MAS/MASTG, ISA/IEC 62443; ensure audit-readiness

• Build/extend tools, scripts, and exploits to validate real-world attacks; leverage AI/ML tools where beneficial.
• Mentor junior testers; improve team practices, tooling, and reporting quality.

Senior Cybersecurity Validation (Penetration Test) - Analyst

Knorr-Bremse Technical Center India (TCI) is looking for a Cybersecurity Analyst into its India-based product cybersecurity team. Technical Center India is part of the Commercial Vehicle division of Knorr-Bremse AG, which designs and manufactures safety critical systems for commercial trucks, buses, trailers and heavy duty vehicles.

Due to the increasing number of external interfaces of a modern vehicle and the trends of autonomous driving, we have to put extra effort into making our products not only safe but secure as well.

As a Senior Cybersecurity Analyst, you will be responsible for cybersecurity validation (penetration testing) and vulnerability management, in relation of our products (Brake System, Steering System, Electrical Air Treatment, ADAS etc.) embedded into the next generation of trucks & buses .

Your main tasks will include:

•Define the cybersecurity validation test strategy & plan

•Validation and penetration testing on embedded controller units

•Design and documentation of scripts for penetration test (CAPL, Python)

•Development of automated tests for validation test (CAPL, Python)

•Support junior colleagues in test development & execution

•Design & Development of the Validation test environment

•Develop and continuously improve the cybersecurity Validation processes

•Close collaboration with our cybersecurity architect and project teams

Requirements:

•Bachelor degree in computer science/electrical engineering or relevant cybersecurity certification in the area

•At least 5 years of experience as a Penetration tester in embedded systems, preferably in the automotive field

•Experience in CAPL, Python languages

•Experience with CAN, LIN, CAN-FD, J1939, ISO-TP communications

•Analytical skills and understanding of complex setups and interactions

•Excellent communication and presentation skills

•Being able to take on a challenge and not being afraid to dive into unknown territory

•Fluent in written and spoken English

Advantages:

•Experience with Vector Test environment (e.g. CANOE, VTestStudio, VTSystem)

•Experience with Jira and Github

•Understanding of today's automotive cybersecurity standards and regulations (such as ISO/SAE 21434, UN Regulation 155 and 156)

•Relevant certification(s) on the field of cybersecurity (OSCP; CISSP; GCFE, CEH or similar)

•Experience with hardware security, including Hardware Trust Anchors, PCB design and product packaging

•Experience with automotive development and penetration testing tools (debuggers, decompilers, network traffic analyzers)

•Knowledge and deep understanding of today's cryptographic algorithms, techniques and applications

•Experience with Linux

What we offer:

Opportunity to work with an agile team on challenging validation projects in an international environment. This position is based at Pune/Chennai located in India.

You can be part of an international team and work together with Cybersecurity colleagues all around the globe.

Exp-6+ years

NP-Immediate to 15 days

Location- Gurgaon

• Skill Set-Experience with threat intelligence and threat modelling.
• Familiarity with security compliance and regulatory frameworks like PCI-DSS, HIPAA, and SOC2.
• Ability to design and implement red team strategies and methodologies.
• Experience in conducting social engineering and phishing campaigns.

JD:

We are looking for an experienced Level 3 Red Team Lead to fortify our cybersecurity defence's by simulating sophisticated cyber-attacks and leading penetration testing efforts. The successful candidate will spearhead red team operations, identify security weaknesses, and collaborate with teams to enhance our security posture.

Key Responsibilities:

• Lead and execute advanced penetration testing and red team operations, targeting network, application, and cloud environments.
• Develop and implement red team exercises to simulate real-world attack scenarios.
• Perform in-depth vulnerability assessments and manage remediation efforts.
• Identify and exploit security vulnerabilities using both automated tools and manual techniques.
• Collaborate with blue teams and incident response to improve detection and response strategies.
• Translate findings into clear remediation playbooks (patch/config/hardening/compensating controls) with prioritized backlogs per platform.
• Champion risk-based prioritization using threat intel (e.g., KEV, EPSS), exploit maturity, exposure paths, and asset criticality.
• Provide hardening feedback to endpoint, identity, network, and cloud architects; co-design preventive controls and guardrails.

• Partner with EDR/XDR/SIEM teams to create/validate detections and analytic rules; integrate findings with ticketing/CMDB/GRC for continuous validation.

• Drive automation for scan orchestration, deduplication, and validation (e.g., pre /post remediation checks, CI/CD hooks for security tests).

• Mentor and guide red team members, providing training and development opportunities.
• Stay ahead of emerging cybersecurity threats, tactics, and procedures to continuously improve red team methodologies.
• Produce executive-level summaries and deep technical reports with clear risk framing, exploit chains, and remediation timelines.

Qualifications:

• Bachelor's degree in computer science, Information Security, or a related field. A master's degree is preferred.
• 5+ years of experience in penetration testing, red teaming, or advanced threat emulation.
• In-depth knowledge of network, cloud, and application security.
• Proficiency with penetration testing frameworks and tools such as Metasploit, Cobalt Strike, and Burp Suite.
• Advanced certifications such as OSCP, OSCE, OSEE, or equivalent are highly recommended.
• Strong scripting and programming skills (Python, PowerShell, Bash).
• Excellent analytical, problem-solving, and critical-thinking skills.
• Exceptional communication skills, capable of conveying complex security issues to diverse audiences.

Professional Summary:

Position: Cybersecurity / Embedded systems (C++/ C) / Medical Devices

Location: Chennai

Exp.:11+ years

• Industry Experience: 12+ years of professional experience, with over 5 years dedicated to medical device cybersecurity and regulatory compliance.
• Technical Development: Strong background in embedded systems development using Linux, C and C++ within the medical device sector.
• Security Implementation Expertise: Specialized in deploying robust security controls for medical devices, including secure authentication, authorization mechanisms, device connectivity, secure boot, and bootloader integration.
• Cybersecurity Risk Management: Proven track record in identifying and mitigating security risks in accordance with international regulatory standards such as FDA (Pre-market and Post-market), EU MDR, Japan PMDA, and China NMPA.
• Regulatory Standards & Compliance: Deep understanding of global security standards and guidelines, including ISO, IEC, AAMI, NIST, FDA, IMDRF, and MDCG, with a focus on medical device-specific security requirements and controls.
• Additional Competencies: Hands-on experience in penetration testing, Software Bill of Materials (SBOM) analysis, and vulnerability management.

Please share your updated CV to , with the below details

Candidate Name

Mobile No.

Email ID

Current Company

Exp.

Notice Period

Current Location

Preferred Location

CCTC

ECTC

Your potential, unleashed.

India's impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realize your potential amongst cutting edge leaders, and organisations shaping the future of the region, and indeed, the world beyond.

At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters.

The team

The Enabling Area - Information Technology team is responsible for building & maintaining different applications for Deloitte South Asia that focuses on providing employee experience.

Your work profile.

Primary purpose of the role:

Oversee and manage regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks.

Supervise and coordinate the monitoring and analysis of security alerts and incidents, and ensure prompt response to security breaches.

Lead collaboration with IT and other departments to ensure security measures are integrated into all aspects of the organization's operations.

Manage and oversee the maintenance of security tools and technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.

Develop and conduct security awareness training for employees to promote a culture of security within the organization.

Major responsibilities & deliverables:

Develop and lead the implementation of comprehensive information security policies, procedures, and guidelines.

Perform and oversee risk assessments and develop risk mitigation strategies.

Prepare and present security reports to senior management and stakeholders.

Stay up-to-date with the latest security trends, threats, and technologies, and advise on necessary updates and changes.

Review and respond to client security questionnaire.

Review and interpret information security clauses in Master service agreement, Engagement letters.

Collaborate with legal teams, IT teams ,different business teams to align client requirements with internal information security policies.

Contribute to internal security awareness and trainings.

Stay up-to-date with the latest security trends, threats, and technologies.

Skills Required:

Experience with cloud security (AWS, Azure, Google Cloud).

Knowledge of network security, application security, and data protection.

Familiarity with regulatory requirements and compliance frameworks.

Experience in incident response and forensic analysis.

Experience in strategic planning and project management.

Ability to work independently and manage multiple information security related activities with timelines.

Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams.

Ability to handle sensitive information with discretion and maintain confidentiality.

Experience required, Any Specific Industry / Company exposure:

Strong knowledge of security frameworks, standards, and best practices.

Experience with security tools and technologies, including SIEM, IDS/IPS, firewalls, and endpoint protection.

Excellent analytical and problem-solving skills.

Strong communication and interpersonal skills, with the ability to work effectively with cross-functional teams.

Proven leadership and team management skills.

12-15 years of experience in Information Security , Cyber Security

Experience in MSA review, client security questionnaires.

Experience in working in MNCs preferred

Desired qualifications

Bachelor's degree in Information Technology, Computer Science, or a related field.

Professional certifications such as CISSP, CISM, CEH, or equivalent are desirable.

Location and way of working

Base location: Mumbai, Delhi

This profile may involve travel for work.

Hybrid is our default way of working.

How you'll grow

Connect for impact

Our exceptional team of professionals across the globe are solving some of the world's most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report.

Empower to lead

You can be a leader irrespective of your career level. Our colleagues are characterized by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership.

Inclusion for all

At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive. At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.

Drive your career

At Deloitte, you are encouraged to take ownership of your career. We recognize there is no one size fits all career path, and global, cross-business mobility and up / re-skilling are all within the range of possibilities to shape a unique and fulfilling career. Know more about Life at Deloitte.

Everyone's welcome entrust your happiness to us

Our workspaces and initiatives are geared towards your 360-degree happiness. This includes specific needs you may have in terms of accessibility, flexibility, safety and security, and caregiving. Here's a glimpse of things that are in store for you.

Interview tips

We want job seekers exploring opportunities at Deloitte to feel prepared, confident, and comfortable. To help you with your interview, we suggest that you do your research, know some background about the organization and the business area you're applying to. Check out recruiting tips from Deloitte professionals.

Company Description

Naresh i Technologies (NareshIT) is a leading software training institute established in 2004 and headquartered in Hyderabad, India, with additional offices and institutes in Chennai. The company provides a range of services, including Software Training, IT Consulting, Project Guidance, and Technology Workshops. Naresh i Technologies specializes in offering a comprehensive eLearning platform, job guarantee programs, free placement services, and hands-on training with real-time projects across advanced technologies.

Role Description

This is a part-time, on-site role for a Cyber Security Trainer located in Hyderabad. The Cyber Security Trainer will be responsible for delivering high-quality training sessions on cybersecurity concepts, preparing course materials, and guiding students through real-world projects. Responsibilities include teaching topics such as application, network, and information security, engaging with students to ensure their understanding, and mentoring students to prepare for successful careers in cybersecurity.

Qualifications

• Mandatory to have an experience working as a trainer.
• Proficient knowledge and experience in Application Security and Cybersecurity best practices.
• Strong understanding of Network Security and Information Security principles and technologies.
• Expertise in Malware Analysis and threat detection techniques.
• Excellent communication and presentation skills for delivering training sessions effectively.
• Hands-on experience in implementing cybersecurity tools and frameworks.
• Previous teaching or training experience is preferred but not mandatory.
• Relevant certifications in cybersecurity, such as CISSP, CEH, or CompTIA Security+, are a plus.
• Bachelor's or master's degree in Computer Science, Information Technology, or a related field is desirable.

Who we are

Graviton Research Capital is a privately funded quantitative trading firm striving for excellence in financial markets research. We trade across a multitude of asset classes and trading venues using a diverse range of concepts, from time series analysis and stochastic models to machine learning and statistical inference. We analyse terabytes of data to identify pricing anomalies and drive innovation in financial markets.

Role Overview

We are seeking a Cyber Security Engineer with a strong focus on system monitoring, logging, and detection engineering. Securing our internal systems and pipelines is critical to our success. In this role, you will own the visibility and security monitoring of our infrastructure, ensuring robust attribution, hardened Access Control Lists (ACLs), and real-time detection of anomalous or unauthorised behaviour.

Key Responsibilities and Deliverables

• Design, standardise, and maintain consistent security configurations across systems to eliminate drift between machine setups and scripts.
• Implement comprehensive, shell-agnostic command and activity logging to ensure all user actions are captured regardless of shell or execution context, with minimal performance impact.
• Lead incident response efforts, including forensic investigations, root-cause analysis, and remediation.
• Create, maintain, and enforce security policies, strict ACLs, and best practices for code, infrastructure, and machine access routes.
• Partner with engineering, DevOps, and Network teams to embed security into CI/CD pipelines and release processes.
• Build centralised log collection pipelines (SIEM) aggregating access, command, and system logs across machines while developing anomaly detection logic to flag malicious behaviour.
• Automate detection of leaked credentials and other secrets, as well as alerting and reporting workflows for security events.

Eligibility and Required Technical Skills

• 3-5 years of experience in cybersecurity, security engineering, or systems security roles.
• Bachelor's or Master's in Computer Science, Information Security, or a related discipline from a top-tier university.
• Deep expertise in Linux systems administration, permissions, sudo, PAM, SSH, and authentication flows.
• Strong experience with command logging, audit frameworks, and log aggregation pipelines.
• Hands-on knowledge of shell environments (bash, zsh) and common logging bypass techniques.
• Familiarity with SIEMs and log analysis platforms (e.g., ELK, Splunk, or similar).
• Experience designing alerts and detections for privilege escalation, credential leakage, and anomalous access.
• Scripting and automation skills in Bash and Python for enforcement and validation.
• Understanding of zero-trust access models and certificate-based authentication (Banyan experience is a plus).

Benefits

Our open and casual work culture gives you the space to innovate and deliver. Our cubicle-free offices, disdain for bureaucracy, and insistence on hiring the very best create a melting pot for great ideas and technology innovations. Everyone on the team is approachable; there is nothing better than working with friends!

Our perks have you covered.

• Competitive compensation
• Annual international team outing
• Fully covered commuting expenses
• Best-in-class health insurance
• Delightful catered breakfasts and lunches
• A well-stocked kitchen
• 4 week annual leaves along with market holidays
• Gym and sports club memberships
• Regular social events and clubs
• After work parties

Important Note

Employment opportunities and job offers at Graviton Research Capital will always come from Graviton Research Capital's Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you're confident that the recipient is. Our email domain The official website to find and apply for job openings at Graviton Research Capital is

Graviton Research Capital is committed to fostering an inclusive work environment that values a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability, or age.

L3 SOC Analyst (SOC L3 Resources)

Willing to work onsite in Noida, Hyderabad, or Bangalore

Job Description:

• Lead investigation and response for complex, high-severity security incidents
• Perform advanced threat analysis, malware analysis, and root cause investigations
• Create and refine detection use cases, playbooks, and response procedures
• Support SOC escalation handling and act as technical authority during incidents
• Mentor and guide L1/L2 SOC analysts
• Work closely with IR, SIEM, and engineering teams to improve SOC maturity

Must Haves:

• 5+ years of experience in a Security Operations Center (SOC) environment
• Willing to work onsite in Noida, Hyderabad, or Bangalore

POSITION SUMMARY: Performing comprehensive penetration testing, vulnerability assessments, and risk analysis across Garmin's global computer systems, products, and software covering web, API, infrastructure, mobile, and hardware security through ethical hacking engagements. Responsible for ensuring adherence to Garmin's information security strategy, programs and best practice. Design, develop, and implement solutions and metrics to successfully integrate and monitor new information security and identity management systems with the existing architecture. In addition, deploy security policies, investigate and evaluate alerts for malicious file execution attempts, and design enhanced protocols aligned with protecting corporate wide production systems. The Cyber Security Engineer II will also lead root-cause analysis efforts to determine improvement opportunities when failures occur.

ESSENTIAL FUNCTIONS:

• Perform in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scale
• In-depth expertise with industry trusted infrastructure and development penetration tools
• In-depth expertise with security, infrastructure, software development, and application technologies
• Proficiency with various methods of reconnaissance, information gathering including network analysis, web application analysis, database analysis
• Strong understanding of: OWASP Top 10, SANS Top 25, CWE , CVSS scoring, threat modeling, MITRE ATT&CK framework
• Secure coding practices and SDLC
• Knowledge of authentication protocols: OAuth2, JWT, SAML, Kerberos, NTLM
• Conducts regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpoint
• Proficiency with various methods of threat modeling and vulnerability assessment including vulnerability scanners, password crackers, network protocol attacks
• Demonstrated proficiency with either the Python, PowerShell, Bash or Ruby programming language
• Expertise with industry-standard tools: Burp Suite Pro, Nmap, SQLMap, Nessus, Nuclei, Metasploit, CrackMapExec, BloodHound
• Familiarity with reverse engineering tools or firmware analysis is a plus
• Willingness and capability to exceed mastery of common penetration tools toward a deeper understanding of the technology that is needed to reveal vulnerabilities that standard tool proficiency does not
• Willingness to learn or experience with device hacking / reverse engineering of products and devices
• Execute red teaming tactics: Active Directory exploitation (Kerberoasting, AS-REP Roasting, DCSync, constrained delegation)
• Lateral movement, persistence, and evasion
• Command and control (C2) setup.

What the candidate will do:

• Internal/External Network Penetration Testing
• Cloud Penetration Testing
• Web Application Security Testing
• API Security Testing
• Mobile Application Security Testing
• IoT / Device Security Testing
• Desktop Application Security Testing
• Red Teaming Activities
• Demonstrating proficiency in diverse reconnaissance and information gathering methods, including network analysis, web application analysis, and database analysis.
• Possessing expertise in industry-standard security best practices and utilizing multiple techniques for penetration testing.
• Managing vulnerabilities and effectively communicating with system owners in English, exhibiting excellent communication skills.
• The desired candidate will have prior experience completing security assessments and generating reports.

Other Responsibilities:

• Creating and developing security assessment solutions
• Daily administrative tasks, reporting and communication with the relevant departments in the organization
• Designs and develops complex, integrated solutions to meet business requirements or enhance performance of Garmin's security systems
• Performs and evaluates costs analyses and vendor comparisons from small through large scale projects to ensure cost-effective and efficient operations
• Measures feasibility of various approaches and makes recommendations
• Communicate effectively regarding system operations and environment changes
• Adhere to SOX, PCI, and other regulatory requirements as dictated
• Understands and avoids potential threats and drives counter measures for IT managed systems
• Ensures that all security requirements are met or exceeded
• Provides significant contributions to defining team roadmap and priorities
• Develops reliable solutions to complex problems which require the regular use of ingenuity and creativity
• Demonstrates broad understanding of Garmin's business model, including Engineering, Operations, Finance, Sales and Marketing
• Serves as a mentor and provides guidance to less experienced IT workers
• Researches new technologies and proposes cost effective solutions
• Provides innovation within area of expertise
• Facilitates team discussions and meetings
• Recognized as an expert in assigned discipline at Garmin and applies extensive technical expertise and analysis to initiatives
• Contributes input to broader technology solutions outside of discipline
• Serves as a leader of change
• Demonstrates professional maturity through giving and receiving constructive feedback
• Conflict is addressed effectively without appreciable oversight
• Coordinates department level non-project changes
• Perform other duties as necessary

Certifications (Preferred):

• Must-have: OSCP
• Nice-to-have: OSEP, OSWE, CRTP, PNPT, eWPTX, Red Team-focused certifications

EDUCATION EXPERIENCE AND SKILLS REQUIRED:

• Bachelor of Science Degree in Computer Science, Information Technology, Management Information Systems, Business or another relevant field AND a minimum of 6 years relevant experience OR equivalent combination of education and relevant experience
• Outstanding academics with the demonstrated ability to apply learned knowledge
• Fluency in English is required
• Demonstrated strong and effective verbal, written, and interpersonal communication skills in a small team setting
• Must be team-oriented, possess a positive attitude and work well with others
• Driven problem solver with proven success in solving difficult problems
• Excellent time management and follow-up skills
• Consistently demonstrates quality and effectiveness in work documentation and organization
• Must be able to exploit vulnerabilities and provide actionable remediation recommendations beyond scanning capabilities

Job Title: Cyber Security Manager

Location: India

Employment Type: Permanent - Full Time (1 FTE)

Reports To: Global Vice President of Information Technology

Herspiegel is a global life sciences consultancy that guides pharmaceutical and biotech companies through their most decisive moments-powering commercial success and expanding patient access. From early asset strategy to launch readiness and market optimization, we help clients navigate complexity and seize opportunity. Our integrated approach brings together scientific insight, evidence strategy, deep market intuition, and executional precision to ensure brands are built to lead.

Position Summary

The Cyber Security Manager is responsible for the hands-on execution and continuous improvement of the organisation's cyber security controls, with a focus on identity, endpoint, and cloud security.

The role owns the technical delivery of security controls and remediation activities, including Zero Trust implementation, MFA and Conditional Access hardening, Microsoft Defender baselines, and closure of penetration-test and audit findings.

Strategic security ownership, enterprise risk acceptance, audit accountability, and executive reporting remain with the VP of IT. This role exists to ensure that security strategy is translated into effective, timely, and sustainable technical controls that cannot be delivered at sufficient pace or depth by MSPs alone.

Key Responsibilities

Security Engineering & Control Execution

• Implement and continuously improve Zero Trust security controls across identity, endpoints, and cloud workloads.
• Design, deploy, and maintain Conditional Access and MFA policies, including privileged access controls.
• Implement and tune Microsoft Defender baselines across endpoints, identities, and cloud services.
• Harden security configurations in line with Microsoft and industry best practice.

Audit, Pen-Test & Control Remediation

• Own the technical remediation of penetration test findings, vulnerability assessments, and internal/external audit actions.
• Ensure timely closure of security findings, with clear evidence suitable for SOC 2/ISO 27001 and other audits.
• Work with IT Operations and MSPs to embed remediations into BAU processes.

SOC 2/ISO 27001 & Security Control Implementation

• Implement and operate the technical security controls required for SOC 2/ISO 27001 readiness and ongoing compliance.
• Support evidence collection by ensuring controls are consistently implemented and monitored.
• Act as the technical subject matter expert for security tooling and control operation.

Customer, Contractual & Supplier Security Assurance

• Provide technical input to customer security questionnaires, due diligence requests, and assurance artefacts, validating that responses accurately reflect implemented security controls.
• Provide security input into customer and supplier contracts, including MSAs, SOWs, DPAs, and security schedules, ensuring commitments are technically achievable and aligned to the organisation's security posture.
• Provide technical input into supplier security reviews and risk assessments led by the Cyber GRC Lead, including validation of security controls, architectures, and remediation feasibility.
• Work with Legal, Procurement, and IT Operations to ensure contractual security requirements are reflected in technical controls and operational practices.

Security Awareness & Phishing Resilience

• Own the operational delivery of the organisation's cyber security awareness programme.
• Manage and administer the KnowBe4 platform, including content selection, campaign scheduling, and reporting.
• Design and run phishing simulation campaigns, tracking user behaviour, failure rates, and repeat risk.
• Work with IT, L&D and People teams to ensure campaigns are delivered effectively and aligned with onboarding and refresher processes.
• Analyse results and provide actionable insights to improve security posture and reduce human risk.
• Support audit and customer assurance by providing evidence of training completion and phishing resilience metrics.

Identity, Endpoint & Cloud Security

• Own the technical security posture of Entra ID, endpoints, and Microsoft 365 services.
• Reduce exposure to identity-based and endpoint-based attacks through proactive control improvements.
• Support secure onboarding of new systems, users, and integrations.

Collaboration & Enablement

• Work closely with IT Operations to ensure security controls are operationally sustainable.
• Provide technical guidance to MSPs, challenging weak implementations where required.
• Support incident response activities from a technical security perspective.

Decision Authority

• The Cyber Security Manager is authorised to make technical security decisions required to implement approved controls and remediate findings.
• Security strategy, risk acceptance, control exceptions, audit sign-off, and executive reporting remain the responsibility of the Global VP of IT.
• Where remediation introduces material user impact, cost, or risk trade-offs, decisions are escalated to the Global VP of IT.
• Security awareness strategy, risk tolerance, and disciplinary escalation thresholds remain with the Global VP of IT.

Required Skills & Experience

Experience

• Proven experience in a hands-on cyber security engineering or security management role.
• Demonstrable experience implementing Zero Trust, identity security, and endpoint protection controls.
• Experience remediating audit and penetration-test findings in regulated or security-conscious environments.

Technical Skills

• Strong expertise in Microsoft security tooling (Entra ID, Defender for Endpoint, Defender for Identity, Microsoft 365 security controls).
• Deep understanding of MFA, Conditional Access, privileged access, and endpoint hardening.
• Familiarity with SOC 2, ISO 27001, and common audit control expectations.

Professional Attributes

• Execution-focused, detail-oriented, and comfortable owning technical outcomes.
• Able to operate independently while aligning to strategic direction.
• Confident challenging MSPs and translating audit findings into technical fixes.

Education, Qualifications & Certifications

Education

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related technical discipline (preferred).
• Equivalent professional experience will be considered in lieu of formal education.

Professional Certifications (Strongly Preferred)

One or more of the following, demonstrating senior hands-on security capability:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Additional / Desirable Certifications

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) or higher
• ISO/IEC 27001 Lead Implementer or Lead Auditor
• GIAC, OSCP, or equivalent technical security certifications
• ITIL Foundation (useful for operating in structured IT environments)

Active pursuit of relevant Microsoft or security certifications during employment is encouraged.

Our client is a leading global investment and advisory firm known for its deep expertise in private equity, real estate, and alternative asset management. The ideal professional will lead regional cybersecurity strategy, engineering excellence, and executive level advisory across business units and portfolio companies.

Some of the key responsibilities will include:

• Drive cybersecurity architecture and governance across cloud, network, application, and identity domains.
• Lead regional crisis response, cyber due diligence, and incident management programs.
• Champion Zero Trust, DevSecOps, and cloud-native security transformation.
• Interface with global stakeholders and portfolio leadership to align security posture with business outcomes.
• Define and report key security KPIs, strengthening enterprise resilience.

To be eligible for this role you will require:

• 17+ years’ cybersecurity experience with 5+ years in senior leadership roles across global or regional enterprises.
• Proven experience in cloud, IAM, and application security within financial services or large-scale technology environments.
• Strong exposure to frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Executive presence with the ability to influence C-suite decision makers.
• Certifications such as CISSP, CISM, GIAC, or AWS Security Specialty preferred.

JOB DESCRIPTION

Experience Range :- 7 to 10 Years

Work Location :- Bangalore

Primary Skills:

• Good knowledge of ISO 21434 CSMS process
• Support in the different security technologies from a technical point (process) of view in:
• Concept phase
• Development phase
• Test phase
• Release phase
• Support in the different security technologies from a technical point (Requirement to Implementation )of view in:
• Requirements management (code beamer)
• Security concepts (creation and review)
• Security technologies (sec. boot, Linux hardening, key management…)
• TARA
• Agile PI Planning (Jira, Confluence)
• Error management
• Excellent problem-solving ability with solid communication and collaboration skills
• Experience with working in agile project environments, using Jira, Confluence etc

Nice to have:

• A relevant tertiary qualification with a security component
• Knowledge of common automotive protocols
• Experience with automotive bus and protocol analysis tools
• Experience with Linux
• Embedded systems

Required Qualifications

• Engineering Degree in CS, E&TC, EE, Cybersecurity—or equivalent
• experience - 7-12 years
• I ndustry - Automotive, Information Technology, Mechatronics, Automation
• Strong hands-on with embedded/automotive protocols (CAN, UDS, DoIP, SOME/IP) and industrial/IoT protocols (Modbus, OPC UA, PROFINET, EtherNet/IP; plus wired/wireless Fieldbus/LoRa/WirelessHART).

Proficiency in tools: CANoe/CANalyzer/SocketCAN; Burp, Metasploit, Nmap,Wireshark.

Key Responsibilities

• Plan and perform end-to-end penetration tests on ECUs, gateways, TCUs, infotainment, ADAS-related ECUs, IoT and medical/industrial devices.

Assess in-vehicle networks (CAN, LIN, FlexRay, Automotive Ethernet) and design realistic attack chains across vehicle, mobile, cloud/back-end

• Align methods with ISO/SAE 21434, UNECE R155/R156, NIST SP 800, OWASP/ASVS/MAS/MASTG, ISA/IEC 62443.
• Collaborate with firmware, hardware, cloud, DevOps, and systems teams; present risks and remediation to customers and stakeholders.

Drive architecture reviews, threat modeling (TARA) and attack surface analysis; contribute to work products and reports

• Conduct firmware/boot-chain testing (secure boot, OTA) and embedded Linux/RTOS security reviews.
• Execute hardware-level testing (JTAG/UART/SPI/I

Head – Cyber Security Practice (Consulting & Delivery)

Total Experience: 15+

Job Location: Bangalore

Role Purpose

The Head of Cyber Security Practice is responsible for building, scaling, and leading the organization’s external cyber security consulting and delivery business. This role owns client advisory, service portfolio, delivery excellence, talent development, and commercial outcomes for the cyber security practice.

Key Responsibilities

Practice & Business Leadership

• Build and grow a profitable cyber security consulting and delivery practice
• Define service offerings, value propositions, and go-to-market strategy
• Partner with sales and leadership teams to support deal shaping, pre-sales, and large pursuits
• Own practice P&L, margins, utilization, and growth targets

Client Advisory & Engagement

• Act as a trusted advisor to CXOs, CISOs, and senior business leaders
• Lead strategic client conversations on cyber risk, transformation, and resilience
• Provide executive oversight for complex, multi-year cyber programs

Delivery & Quality

• Ensure high-quality delivery across consulting, transformation, and managed services engagements
• Establish delivery frameworks, playbooks, and reusable assets

Head – Cyber Security Practice (Consulting & Delivery)

Total Experience: 15+

Job Location: Bangalore

Role Purpose

The Head of Cyber Security Practice is responsible for building, scaling, and leading the organization’s external cyber security consulting and delivery business. This role owns client advisory, service portfolio, delivery excellence, talent development, and commercial outcomes for the cyber security practice.

Key Responsibilities

Practice & Business Leadership

• Build and grow a profitable cyber security consulting and delivery practice
• Define service offerings, value propositions, and go-to-market strategy
• Partner with sales and leadership teams to support deal shaping, pre-sales, and large pursuits
• Own practice P&L, margins, utilization, and growth targets

Client Advisory & Engagement

• Act as a trusted advisor to CXOs, CISOs, and senior business leaders
• Lead strategic client conversations on cyber risk, transformation, and resilience
• Provide executive oversight for complex, multi-year cyber programs

Delivery & Quality

• Ensure high-quality delivery across consulting, transformation, and managed services engagements
• Establish delivery frameworks, playbooks, and reusable assets

Project description

This opening is for an ADAS Domain Controller project for a prestigious OEM, where Luxoft is working with the OEM teams to deliver a next-generation Platform solution based on AUTOSAR Classic, AUTOSAR Adaptive and QNX working together as a system interacting with a host of cameras, ultrasound sensors, internal and external Radars.

Luxoft is collaborating on Signal and Service Management, Diagnostics, SW Update, Vehicle Config, QNX/Middleware and Software Architecture areas with the OEM directly.

Luxoft is expected to delivery quality and expert support in the above areas, drive topics independently, liaise with other OEM stakeholders to remove blockers. The ideal candidate needs to have endless curiosity and can pair a global mindset with locally relevant execution. You should be a gritty problem solver, never give up attitude and a self-starter who can think of out-of-box solution. The successful candidate will be a team player, display a balance of hard and soft skills, including the ability to respond quickly to Client's changing needs.

Responsibilities

• Analyze Cybersecurity requirements, systems and software architectures from a Cybersecurity standpoint and provide guidance for the required implementation.
• Responsible for Threat Analysis, Risk Assessment activities (TARA): Impact assessment, asset and threat scenario identification activities, Attack feasibili

Job Description

Qualifications & Requirements

• Proven experience as a Security Analyst, Security Engineer, or Penetration Tester
• Strong understanding of securing corporate environments and business applications
• Hands-on experience with manual penetration testing and DAST tools/techniques
• Ability to analyze scan results and recommend clear remediation or mitigation plans
• Working knowledge of penetration testing tools and platforms (Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark)
• Strong understanding of common vulnerabilities and attack vectors (SQL Injection, XSS, buffer overflows) and their mitigations
• Familiarity with standards and frameworks such as OWASP, CVE, CWE, SANS and NIST
• Understanding of Transport Layer Security (TLS) and secure communication mechanisms
• Foundational knowledge of hosting platforms, public cloud services, and enterprise networking
• Familiarity with secure coding practices and vulnerability management frameworks (OWASP)
• Proficiency in Python or Bash scripting for automation and security tasks
• Familiarity with network protocols and encryption concepts
• Understanding of regulatory and compliance frameworks (PCI DSS, GDPR)
• Continuous learning mindset with curiosity to explore new tools and techniques (HTB, TryHackMe, labs, self-learning)

🔐 Responsibil

🚨 We’re Hiring | Senior Manager – Cybersecurity Risk Assessment 🔐

Are you passionate about owning enterprise-wide cybersecurity risk and leading high-impact security assessments across modern tech stacks? Here’s an opportunity to shape and strengthen the security posture of large-scale platforms.

💼 Experience: 12–16 Years

🎯 Role: Senior Manager – Cybersecurity Risk Assessment

🔥 Role Highlights

✨ Lead the Cyber Security Risk Assessment (CSRA) program end to end

✨ Assess Web, Mobile, API & thick-client applications across on-prem, hybrid & cloud environments

✨ Benchmark security posture against NIST, CIS, SWIFT CSP and industry standards

✨ Drive remediation validation, automation & innovation in assessment processes

✨ Partner with Engineering, Cloud, DevOps & Product teams to close risks

✨ Manage, mentor & scale a high-performing security assessment team

✨ Present risk insights & recommendations to senior leadership

🔍 What We’re Looking For

✔ Deep expertise in Application, Infrastructure & Cloud Security (AWS/Azure/GCP)

✔ Strong hands-on with SAST/DAST, vulnerability management, CSPM & pentesting tools

✔ Experience with OWASP Top 10, API security & ope

About Us

Banyan Cloud is a U.S.-based cybersecurity product development company headquartered in San Jose, California. We are the creators of Banyan Cloud , a first-of-its-kind cybersecurity SaaS platform that simplifies code-to-cloud security across multi-cloud environments and diverse technologies.

This is a once-in-a-lifetime opportunity to join a fast-growing, rocket-ship startup led by a world-class executive team. We are looking for individuals who aspire to be part of cutting-edge solutions and services that address next-generation Cyber Security challenges.

Role Overview

We are seeking Pre-Sales Professionals who will play a critical role in selling our cybersecurity SaaS platform and cybersecurity services, including SOC services, to help organizations effectively manage cyber risk. The ideal candidate will have hands-on cybersecurity experience working with end customers and will be comfortable managing pre-sales cycles, solution design, and alliance management.

About Us

Banyan Cloud is a U.S.-based cybersecurity product development company headquartered in San Jose, California. We are the creators of Banyan Cloud , a first-of-its-kind cybersecurity SaaS platform that simplifies code-to-cloud security across multi-cloud environments and diverse technologies.

This is a once-in-a-lifetime opportunity to join a fast-growing, rocket-ship startup led by a world-class executive team. We are looking for individuals who aspire to be part of cutting-edge solutions and services that address next-generation Cyber Security challenges.

Role Overview

We are seeking Pre-Sales Professionals who will play a critical role in selling our cybersecurity SaaS platform and cybersecurity services, including SOC services, to help organizations effectively manage cyber risk. The ideal candidate will have hands-on cybersecurity experience working with end customers and will be comfortable managing pre-sales cycles, solution design, and alliance management.

Cyber Hygiene Assurance

Location: Pune (Kharadi)

Experience: 5 to 12 Years

Notice Period: Immediate

Your role

Do you have the expertise to control the quality of cyber security products? Are you interested in reviewing KPCI (Key Performance and Control Indicators) and KPC (Key Procedural Controls)? Are you a committed and visionary team player with a logical mind-set?Are you motivated to work in a complex, diverse and global environment?

We’re looking for a Cyber Hygiene Assurance to

• Develop and maintain effective methods to review Cyber Hygiene KPCI Assessments.
• Identify and report gaps using CHA methodologies
• Collaborate with Product Owners on how to remediate identify discrepancies
• Investigate scanning issues across infrastructure, applications, and systems, and establish appropriate corrective actions
• Collaborate with cross-functional groups, including Network teams, CMDB Owners, CISO, and Risk, in the risk reduction
• Demonstrate proficiency with a range of technologies and tools, including CMDB, Azure Cloud, and vulnerability scanners
• Participate in reviewing processes and implementing improvements, including automation
• Conduct technical quality assessments, such as analyzing false positives and reviewing risk ratings

Your expertise

You have

WHO ARE WE?

We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!

CloudSEK, one of India’s most trusted Cyber security product companies, is on a mission to build the world’s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention.

Founded in 2015, headquartered at Singapore, we are proud to say that we’ve grown at a frenetic pace and have been able to achieve some accolades along the way, including:

CloudSEK’s Product Suite:

• CloudSEK XVigil constantly maps a customer’s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support.
• A powerful Attack Surface Monitoring tool that gives visibility and intelligence on customers’ attack surfaces. CloudSEK's BeVigil uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known an

Our client is a leading global investment and advisory firm known for its deep expertise in private equity, real estate, and alternative asset management. The ideal professional will lead regional cybersecurity strategy, engineering excellence, and executive level advisory across business units and portfolio companies.

Some of the key responsibilities will include:

• Drive cybersecurity architecture and governance across cloud, network, application, and identity domains.
• Lead regional crisis response, cyber due diligence, and incident management programs.
• Champion Zero Trust, DevSecOps, and cloud-native security transformation.
• Interface with global stakeholders and portfolio leadership to align security posture with business outcomes.
• Define and report key security KPIs, strengthening enterprise resilience.

To be eligible for this role you will require:

• 17+ years’ cybersecurity experience with 5+ years in senior leadership roles across global or regional enterprises.
• Proven experience in cloud, IAM, and application security within financial services or large-scale technology environments.
• Strong exposure to frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Executive presence with the ability to influence C-suite decision makers.
• Certifications such as CISSP, CISM, GIAC, or AWS Security Specialty preferred.

Job Description: Faculty – Cyber Security

Position Titles:

• Assistant Professor – Cyber Security
• Associate Professor – Cyber Security
• Professor – Cyber Security

Department: Computer Science & Engineering / Cyber Security

Institution: Chandigarh University , Gharuan, Mohali, Punjab, India

Employment Type: Full-Time, Permanent

1. Position Overview

Chandigarh University invites applications for faculty positions at the Assistant, Associate, and Professor levels in the area of Cyber Security . The selected candidates will contribute to teaching, research, curriculum development, student mentorship, and academic administration for Undergraduate and Postgraduate programs including B.Tech, M.Tech, BCA, MCA, and related courses.

2. Educational Qualifications

Assistant Professor

• Essential:
• B.Tech in Cyber Security / Computer Science / Information Technology or related discipline from a recognized University.
• M.Tech in Cyber Security / CSE / IT or related specialization.
• Ph.D. in Cyber Security or a closely related area (awarded or submitted per UGC/AICTE norms).
• Additional:
• BCA/MCA (with Cyber Security coursework) w

. L3 SOC Analyst (SOC L3 Resources)

**Willing to work onsite in Noida, Hyderabad, or Bangalore

Job Description:

• Lead investigation and response for complex, high-severity security incidents
• Perform advanced threat analysis, malware analysis, and root cause investigations
• Create and refine detection use cases, playbooks, and response procedures
• Support SOC escalation handling and act as technical authority during incidents
• Mentor and guide L1/L2 SOC analysts
• Work closely with IR, SIEM, and engineering teams to improve SOC maturity

Must Haves:

• 5+ years of experience in a Security Operations Center (SOC) environment
• Willing to work onsite in Noida, Hyderabad, or Bangalore

Key Responsibilities

• Perform continuous security testing of web applications and REST APIs during development, testing, and pre-release phases
• Conduct manual and automated application security testing to identify vulnerabilities
• Review application logic related to authentication, authorization, session management, and input validation
• Collaborate directly with developers to explain security findings and recommend effective remediation strategies
• Track security issues from discovery through remediation using internal ticketing or tracking systems
• Support production incident investigations, root cause analysis, and post-incident reviews
• Assist in improving secure development practices and early-stage security reviews
• Prepare clear and actionable security documentation and reports for engineering teams
• Help maintain alignment with common application security standards and best practices

JOB SUMMARY:

The security analyst is responsible for analysing cybersecurity events, improving threat detection capabilities and procedures. If an event results in a security incident, the analyst will work with the relevant stakeholders to respond and contain the incident.

Job Title:

Incident Response (IR) Manager

Location:

Ahmedabad, Gujarat (On-site only, no work-from-home flexibility)

Purpose

We are seeking a highly skilled and proactive Incident Response (IR) Manager to join our cybersecurity operations team in Ahmedabad. The IR Manager will work closely with the SOC team and report directly to the Head of Cybersecurity Operations. This role is responsible for managing the lifecycle of security incidents, ensuring investigation, response, and recovery, while driving continuous improvements in incident response processes and playbooks.

Experience

- 8–12 years of experience in cybersecurity, with at least 5 years focused on incident response and security operations.

- Proven track record in handling high-severity cybersecurity incidents and coordinating across teams to achieve resolution.

- Strong knowledge of incident detection, containment, eradication, and recovery processes.

- Exposure to working in a 24x7 SOC environment and collaborating with cross-functional teams (SOC, VA, network, application, and infrastructure, etc.).

Roles and Responsibilities

- Lead and coordinate all phases of cybersecurity incident response, ensuring effective containment, eradication, and recovery.

- Collaborate closely with SOC analysts to triage alerts, escalate critical incidents, and oversee incident investigations.

Adani Enterprises Limited

Today