Top Cyber Security Jobs in Bengaluru

Owns IT security governance, ISO and SOC 2 audit readiness, AWS cloud security, network security, and product security. Responsibilities include maintaining policies and risk registers, coordinating audits, reviewing cloud and network configurations, performing threat modeling and security testing, managing vulnerabilities, supporting incident response, conducting phishing exercises, and establishing controls for AI tools. Requires 3–6 years of security experience, AWS and application security expertise, scripting, infrastructure-as-code familiarity, and strong communication skills.

Own the end-to-end security architecture for Physical AI SoCs, including hardware roots of trust, secure boot, key management, trusted execution, cryptographic acceleration, secure updates, attestation, and device identity. Lead threat modeling against physical, side-channel, fault-injection, and supply-chain attacks. Partner across silicon, firmware, safety, and platform teams from architecture through production, establish security standards, mentor engineers, and support certification and customer assurance.

Assist with web, mobile, thick-client, web-service, and API application security testing and penetration testing. Document vulnerabilities, produce technical reports, support remediation, validate fixes, and conduct retesting under senior guidance. The role requires foundational knowledge of OWASP Top 10 and common web vulnerabilities, hands-on Burp Suite experience, familiarity with HTTP/HTTPS, REST APIs, authentication, and session management, plus strong communication skills.

Lead Microsoft 365 security and compliance by designing security frameworks, automating administration with PowerShell, managing security policies, configuring Purview sensitivity labels and encryption, tuning DLP controls, optimizing Entra ID Conditional Access, reviewing incidents, and assessing roadmap features against regulatory and security requirements.

Architect and optimize enterprise identity and access management solutions using ForgeRock IDM, AM, DS, and IG. Lead secure API and microservices integration, Java-based customization, CI/CD and DevSecOps implementation, and cloud-native deployments across AWS, Azure, and GCP. Manage Docker, Kubernetes, and Linux/Unix infrastructure while driving security policies, risk assessments, high availability, disaster recovery, and continuous improvement across the identity ecosystem.

Design and maintain secure, scalable Python backend services for AI workflows. Responsibilities include asynchronous API development with FastAPI, database schema management using SQLModel and SQLite, C4 architecture and data-flow documentation, secure OpenAI and Anthropic integrations, ChromaDB vector search and embeddings, and comprehensive asynchronous testing with pytest. Collaborate with cross-functional teams to ensure AI application security, reliability, data integrity, and resilience.

Design and enforce AWS cloud security controls, including threat detection, encryption, IAM, and compliance with CIS and NIST frameworks. Develop Python and boto3 automation, manage Terraform infrastructure, and integrate security checks into GitHub Actions and Jenkins CI/CD pipelines. Maintain secure APIs, key management systems, and least-privilege access across cloud environments.

Manages and secures complex network infrastructure, including DNS, SSL certificates, micro-segmentation, firewalls, proxies, F5 solutions, CDN integration, and DDoS mitigation. Develops security runbooks, performs upgrades and patching, leads incident troubleshooting, supports disaster recovery and go-live events, and administers security management applications. Requires 5–8 years of network security experience and expertise with F5 LTM, GTM, ASM, Trend Micro, automation testing, and firewall management.

Secure Emergent’s AI-driven application generation infrastructure. Responsibilities include defining secure-by-default patterns, building validation and guardrail systems, detecting prompt injection, threat modeling multi-tenant environments, developing authentication and authorization primitives, securing APIs, and red-teaming AI-generated applications. The role requires strong Python and JavaScript/TypeScript coding skills, deep application security expertise, and experience collaborating with product and engineering teams.

Own security across Emergent’s AI-generated applications, agent pipelines, cloud infrastructure, and runtime environments. Design multi-tenant security controls for AWS, GCP, Kubernetes, containers, IAM, APIs, and CI/CD. Lead threat modeling, detection, and defense against prompt injection, container escapes, privilege escalation, and data exfiltration. Partner with engineering and product teams to build scalable security frameworks for untrusted code and large-scale execution environments.

Conduct web, API, cloud, and network penetration tests across FinTech environments. Perform red-team and adversary simulations, develop exploits and payloads, identify vulnerabilities, create proof-of-concepts, and recommend remediation. Produce executive and technical security reports while researching emerging exploits, malware tactics, and industry-specific attack surfaces. Collaborate with security analysts, DevOps, and IT teams to strengthen organizational defenses.

Monitor, investigate, triage, and respond to security alerts and incidents in a hybrid-cloud environment. Maintain EDR, SIEM, vulnerability scanning, and other security technologies; review logs, analyze events, support vulnerability management and incident response, conduct compliance reviews, document findings, deliver security awareness training, and participate in on-call and weekend support rotations.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Designs and implements enterprise security architectures, identity and access management solutions, multi-vendor integrations, and greenfield security projects. Produces high- and low-level design documentation, leads security engineering efforts, and integrates Microsoft Defender, Entra ID, Proofpoint, CyberArk PAM, and ManageEngine solutions to strengthen threat protection, monitoring, remediation, and compliance.

Lead enterprise cloud security initiatives focused on CSPM and Wiz.io. Design and oversee Azure and broader cloud security architectures, conduct security assessments, develop remediation roadmaps, and produce technical documentation. Manage enterprise consulting engagements and stakeholder relationships while serving as a liaison between security teams and business units. Apply AI tools and prompt engineering to improve consulting workflows and validate AI-generated security content.

Lead technical strategy and mentor engineers while building scalable identity security systems. Design backend services, frontend interfaces, event-driven architectures, databases, APIs, and posture-scoring infrastructure using Go, Python, React, TypeScript, Kafka, and PostgreSQL. Own architecture, code quality, observability, operational reliability, incident response, and SLOs while partnering with Product Management and security platform teams.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Own and advance Vegapay’s security program across application, cloud, operations, and compliance. Lead VAPT and secure design reviews, harden cloud and container environments, operate detection and incident response, and support PCI DSS, ISO 27001, SOC 2, and other audits. Mentor security staff, establish technical standards, review architectures and code, manage security risks, and partner with engineering, product, and regulated financial-services stakeholders.

Secure and harden a multi-tenant, AI-driven execution environment: design sandboxing and isolation, defend containers and cloud infra (AWS/GCP), implement runtime detection, integrate logging/SIEM, and protect CI/CD and supply chain for AI-generated code.

Administer and optimize the Netskope Security Cloud ecosystem, including SWG, CASB, DLP, and ZTNA. Develop cloud security strategies and policies, monitor cloud traffic, investigate policy violations, lead security incident response, and integrate Netskope with Azure AD and Okta. The role requires 6–8 years of cloud security experience and is based in a hybrid Bangalore work model.

Lead end-to-end ServiceNow GRC implementations, including solution architecture, development, integrations, deployment, and security design. Translate business requirements into scalable technical solutions, manage data synchronization and third-party integrations, oversee project delivery and teams, and maintain client relationships. Support pre-sales activities, estimations, proposals, upgrades, and patching. The role requires strong ServiceNow scripting, configuration, customization, GRC expertise, security architecture, and client management experience.

Design, implement, govern, and optimize Microsoft 365 Conditional Access solutions using risk-based controls, Zero Trust principles, identity security, MFA, device compliance, and Intune. Manage access policies, troubleshoot access issues, assess policy impact, establish security governance, and collaborate with IAM, endpoint, cybersecurity, and workplace teams as the technical authority for Microsoft 365 access security.

Provides L2 managed-services support for enterprise network security and wireless infrastructure. Responsibilities include troubleshooting routing, switching, WAN, LAN, SD-WAN, firewalls, VPNs, wireless connectivity, authentication, and security incidents. The engineer performs configuration changes, upgrades, RCA, preventive actions, incident and problem management, ISP and OEM coordination, SLA reporting, documentation, and on-call maintenance.

Provide hands-on Oracle ERP Cloud security consulting, including role creation and customization, job and duty roles, function and data security, Segregation of Duties, Risk Management Cloud, Advanced Access Controls, Advanced Financial Controls, and security-sensitive access analysis.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.