Top Cyber Security Jobs in Bengaluru

Design, implement, and operate AI-native impersonation and detection systems end-to-end. Analyze missed attacks, write and tune scored detection logic, build LLM-based detection agents, measure precision/recall, surface reusable intelligence, participate in on-call rotation, and collaborate across engineering, product, and data science to ship reliable, scalable detection.

Advance a proprietary vulnerability database by improving AI pipelines for vulnerability validation, reachability analysis, exploit generation, triage, enrichment, and prioritization. Analyze vulnerabilities, collaborate with zero-day researchers, automate discovery workflows, integrate findings into security pipelines, and author public-facing blogs, advisories, and technical reports. The role requires vulnerability research, production security tooling, AI systems, code analysis, and security communication expertise.

Build and operate scalable backend services, APIs, data pipelines, and distributed systems processing hundreds of millions of events daily. Responsibilities include owning complex features from design through production, maintaining SLAs and SLOs, testing and debugging, supporting on-call operations, improving observability, collaborating across teams, and mentoring junior engineers. The role requires expertise in high-throughput messaging, search and indexing, cloud infrastructure, workflow orchestration, and production reliability.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Support information security compliance programs focused on ISO 27001, SOC 1, and SOC 2. Develop and maintain security policies, conduct risk assessments and gap analyses using ISO 27001 and NIST CSF controls, prepare audit and customer RFI documentation, track remediation, report compliance metrics, and perform third-party vendor risk assessments.

Own security architecture and engineering across AWS and multi-cloud payment platforms. Lead IAM, Zero Trust, API and application security, threat modeling, CI/CD security automation, vulnerability management, detection engineering, secrets management, supply chain security, incident response, compliance controls, and security tooling. Partner with engineering, infrastructure, product, GRC, vendors, auditors, and executives while mentoring security engineers and building a security-by-design culture.

Design and own end-to-end networking and IT security solutions from opportunity qualification through deployment. Engage customers, assess requirements, architect network and security frameworks, build accurate OEM-specific Bills of Material, create proposals, defend technical solutions, and coordinate with implementation teams. The role also involves mentoring junior engineers, advising on technology trade-offs, and staying current with networking and cybersecurity advancements.

Designs, deploys, operates, and troubleshoots enterprise Cisco and Palo Alto firewall, switching, wireless, routing, VPN, SD-WAN, and SASE infrastructure. Responsibilities include incident escalation, rule-base optimization, network segmentation, change management, vulnerability and patch cycles, audit support, documentation, and mentoring junior engineers. The role requires extensive L3 network security experience and ownership of managed firewall environments.

Conduct penetration tests, red team and purple team exercises across web applications, networks, APIs, cloud, and mobile systems. Identify and exploit vulnerabilities, develop proof-of-concept exploits and security automation, integrate offensive techniques into CI/CD pipelines, research emerging threats, validate detection capabilities, and document remediation guidance. Collaborate with SOC, DevOps, IT, engineering, and incident response teams to strengthen organizational security defenses.

Configure, implement, monitor, troubleshoot, and document enterprise Network Access Control environments. Manage authentication, authorization, endpoint profiling, posture assessment, VLAN assignment, segmentation, and wired and wireless 802.1X access. Integrate NAC with Active Directory, RADIUS, LDAP, network infrastructure, firewalls, SIEM, and endpoint security tools. Support deployments, upgrades, incident resolution, customer implementations, reporting, and coordination with network, security, infrastructure, OEM, and customer teams.

Conduct web, network, mobile, wireless, thick-client, and source-code penetration testing; perform red-team activities and attack-vector research; document and present VAPT findings; tailor security solutions to client needs; and handle escalations. The role requires strong knowledge of OWASP standards, vulnerability assessment, technical writing, presentations, communication, and customer handling.

Provide L1 technical support for an AI-driven email and SaaS security platform: triage and resolve inbound tickets, investigate threats and logs, collaborate with Engineering/Product, support onboarding, and create knowledge base content to improve customer outcomes and product quality.

Lead the organization's cybersecurity strategy, policies, and compliance. Oversee security operations, incident response, vulnerability management, cloud (Azure/M365) and infrastructure security, SIEM/SOAR, IAM, DLP, vendor risk assessments, audits, training, and security team leadership.

Lead design and implement secure, highly available cloud infrastructure across AWS and Azure. Define cloud strategy, governance, and migration plans. Build IaC with Terraform/Pulumi, implement GitOps/CI-CD, automate provisioning, and enforce networking, security, observability, and disaster recovery practices while guiding engineering teams.

Hands-on information security engineer supporting daily security operations (monitoring, alert triage, investigations), incident response, vulnerability management, risk remediation, and security tooling (SIEM, EDR, IAM, DLP). Drives process optimization and automation using scripting and AI-enabled security technologies, and assists with compliance and security documentation.

Provide network security engineering support for the client (Goldman Sachs). Implement and maintain network security controls, troubleshoot security issues, collaborate with stakeholders, and communicate clearly. On-site role based in Bangalore; 2-5 years experience preferred.

Administer and support enterprise security applications on UNIX/Linux platforms, perform installations, tuning, incident and change management, troubleshoot complex issues, participate in cross-functional security projects, and maintain strong customer and vendor relationships.

Manage firewall and network security operations including policy administration (Checkpoint/Juniper), ACL and routing configuration, change request implementation, lifecycle management, runbook and SOP documentation, and stakeholder coordination.

Manage and implement network security for large IP networks: firewall and policy administration (Checkpoint/Juniper), ACL and routing configuration, change implementation, lifecycle management, documentation, troubleshooting, and cross-team coordination in a shift-based, geographically distributed environment.

Administer and support Microsoft Exchange environments and maintain network security posture. Provide operational support, troubleshooting, and collaborate with IT teams for secure email and network services.

Implement and manage SAP security and GRC solutions (Access Control, Process Control) across ECC, CRM, and BI landscapes. Support audits, enforce role-based access controls, maintain processes and compliance, and collaborate with stakeholders across Bangalore/Noida/Chennai locations.

Develop and implement software security features for an enterprise Java/Spring application. Work with SAML/OAuth/Spring Security/OWASP/LDAP/IDM, Java/J2EE, Hibernate and web services. Contribute to development on a Service Exchange Platform. Requires strong communication and immediate availability.

Responsible for information security operations including incident resolution, root cause analysis, corrective/preventive actions, privileged account management, audit log reviews, and implementing data leakage prevention and document classification tools. Must manage DLP and anti-phishing toolsets and maintain ISO 27001 and CEH-aligned practices.

Hands-on security engineering and GRC: secure AWS/EKS infrastructure, review IaC, run vulnerability management and incident response, maintain ISMS and audit evidence (ISO27001, SOC2, DPDP), perform risk assessments and vendor due diligence, automate access and asset controls, and maintain security monitoring and awareness programs.

Hybrid Application and Cloud Security engineer splitting time between AppSec (code review, SAST/DAST/SCA triage, threat modeling, CI/CD tooling) and CloudSec (AWS IAM, Kubernetes hardening, WAF tuning, GuardDuty/Security Hub monitoring). Contributes to automation, runbooks, incident playbooks, and on-call rotation while partnering with engineering pods to drive remediation and reduce risk.