Top Cyber Security Jobs in Bengaluru

Lead the organization's cybersecurity strategy, policies, and compliance. Oversee security operations, incident response, vulnerability management, cloud (Azure/M365) and infrastructure security, SIEM/SOAR, IAM, DLP, vendor risk assessments, audits, training, and security team leadership.

Lead design and implement secure, highly available cloud infrastructure across AWS and Azure. Define cloud strategy, governance, and migration plans. Build IaC with Terraform/Pulumi, implement GitOps/CI-CD, automate provisioning, and enforce networking, security, observability, and disaster recovery practices while guiding engineering teams.

Hands-on information security engineer supporting daily security operations (monitoring, alert triage, investigations), incident response, vulnerability management, risk remediation, and security tooling (SIEM, EDR, IAM, DLP). Drives process optimization and automation using scripting and AI-enabled security technologies, and assists with compliance and security documentation.

Provide network security engineering support for the client (Goldman Sachs). Implement and maintain network security controls, troubleshoot security issues, collaborate with stakeholders, and communicate clearly. On-site role based in Bangalore; 2-5 years experience preferred.

Administer and support enterprise security applications on UNIX/Linux platforms, perform installations, tuning, incident and change management, troubleshoot complex issues, participate in cross-functional security projects, and maintain strong customer and vendor relationships.

Manage firewall and network security operations including policy administration (Checkpoint/Juniper), ACL and routing configuration, change request implementation, lifecycle management, runbook and SOP documentation, and stakeholder coordination.

Manage and implement network security for large IP networks: firewall and policy administration (Checkpoint/Juniper), ACL and routing configuration, change implementation, lifecycle management, documentation, troubleshooting, and cross-team coordination in a shift-based, geographically distributed environment.

Administer and support Microsoft Exchange environments and maintain network security posture. Provide operational support, troubleshooting, and collaborate with IT teams for secure email and network services.

Implement and manage SAP security and GRC solutions (Access Control, Process Control) across ECC, CRM, and BI landscapes. Support audits, enforce role-based access controls, maintain processes and compliance, and collaborate with stakeholders across Bangalore/Noida/Chennai locations.

Develop and implement software security features for an enterprise Java/Spring application. Work with SAML/OAuth/Spring Security/OWASP/LDAP/IDM, Java/J2EE, Hibernate and web services. Contribute to development on a Service Exchange Platform. Requires strong communication and immediate availability.

Responsible for information security operations including incident resolution, root cause analysis, corrective/preventive actions, privileged account management, audit log reviews, and implementing data leakage prevention and document classification tools. Must manage DLP and anti-phishing toolsets and maintain ISO 27001 and CEH-aligned practices.

Hands-on security engineering and GRC: secure AWS/EKS infrastructure, review IaC, run vulnerability management and incident response, maintain ISMS and audit evidence (ISO27001, SOC2, DPDP), perform risk assessments and vendor due diligence, automate access and asset controls, and maintain security monitoring and awareness programs.

Identify and mitigate application security vulnerabilities via threat modeling, manual and automated secure code review, security automation tool development, adversarial analysis, and security training across the SDLC.

Lead development and execution of security strategy, build and manage a high-performing security team, design security architectures, oversee threat detection and incident response, ensure compliance (ISO/IEC 27001), liaise with regulators/auditors/law enforcement, and represent the company publicly on security matters.

Lead and maintain company IT infrastructure and security, including network administration, endpoint and web/application protection, SD-WAN and Wi‑Fi design, AD/WSUS management, AV conferencing, documentation, vendor coordination, ITIL-based project leadership, security audits, disaster recovery, team management, and user support/training.

Lead information security strategy and IPO readiness, ensure RBI/SEBI compliance, oversee security architecture (cloud/AWS, web/mobile, APIs), run DevSecOps and 24/7 CSOC/SIEM operations, manage VAPT/Red Teaming and incident response, and govern third-party/vendor security and data privacy (DPDP/ISO27001).

Perform VAPT (internal/external) across web, API, mobile, cloud; conduct SAST/DAST and manual testing; produce PoC reports; perform security code reviews; collaborate with DevOps and engineering to remediate vulnerabilities and integrate secure SDLC practices.

Lead a team to design, architect, and deliver scalable, secure multi-tenant microservices for breach prediction and prevention. Provide technical leadership, code reviews, cloud architecture (AWS), mentoring, and drive end-to-end feature delivery in an agile environment.

Design, deploy, and operate information security controls and tools (SIEM, DLP, EDR); run VAPT and vulnerability scanning; maintain security frameworks (ISO27001, NIST, OWASP); manage third-party risk; support cloud and application security reviews; produce security metrics, governance reports, and awareness training.

Hybrid Application and Cloud Security engineer splitting time between AppSec (code review, SAST/DAST/SCA triage, threat modeling, CI/CD tooling) and CloudSec (AWS IAM, Kubernetes hardening, WAF tuning, GuardDuty/Security Hub monitoring). Contributes to automation, runbooks, incident playbooks, and on-call rotation while partnering with engineering pods to drive remediation and reduce risk.

Lead Sarvam's security strategy and architecture for AI infrastructure and products. Perform BFSI-grade threat modeling, secure APIs and data isolation, drive vulnerability discovery/remediation, run adversarial testing and red teams, integrate security into CI/CD, and improve cloud IAM, secrets management, and detection/response.

Lead and build Glomopay's end-to-end InfoSec program: governance, compliance (ISO27001, PCI, IFSCA/RBI), third-party risk, SOC/SIEM/PAM/DLP operations, incident management, BCP/DR, and regulatory/audit interfacing. Hands-on implementation and ongoing monitoring across cloud (GCP), endpoints, network, and application security.

Monitor SIEM and analytics tools to acknowledge, analyze, validate, and escalate security incidents; collect logs for investigations; manage incident tracking, change requests and root cause analysis in ITSM; produce regular SIEM reports; analyze support ticket data and ticket quality, identify outliers, and recommend process improvements.

Analyze and triage malicious open-source packages across public package ecosystems; reverse-engineer obfuscated code; identify malicious behaviors and IoCs; maintain threat campaign tracking; publish technical advisories; and collaborate to improve detection pipelines and threat databases.

Provide network and security consulting: gather requirements, design scalable network architectures, deploy and optimize security solutions (firewalls, VPNs, IDS/IPS), troubleshoot issues, produce documentation, monitor performance, and mentor junior staff while ensuring compliance and best practices.