Top Cyber Security Jobs in Bengaluru

Lead technical strategy and mentor engineers while building scalable identity security systems. Design backend services, frontend interfaces, event-driven architectures, databases, APIs, and posture-scoring infrastructure using Go, Python, React, TypeScript, Kafka, and PostgreSQL. Own architecture, code quality, observability, operational reliability, incident response, and SLOs while partnering with Product Management and security platform teams.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Own and advance Vegapay’s security program across application, cloud, operations, and compliance. Lead VAPT and secure design reviews, harden cloud and container environments, operate detection and incident response, and support PCI DSS, ISO 27001, SOC 2, and other audits. Mentor security staff, establish technical standards, review architectures and code, manage security risks, and partner with engineering, product, and regulated financial-services stakeholders.

Secure and harden a multi-tenant, AI-driven execution environment: design sandboxing and isolation, defend containers and cloud infra (AWS/GCP), implement runtime detection, integrate logging/SIEM, and protect CI/CD and supply chain for AI-generated code.

Administer and optimize the Netskope Security Cloud ecosystem, including SWG, CASB, DLP, and ZTNA. Develop cloud security strategies and policies, monitor cloud traffic, investigate policy violations, lead security incident response, and integrate Netskope with Azure AD and Okta. The role requires 6–8 years of cloud security experience and is based in a hybrid Bangalore work model.

Lead end-to-end ServiceNow GRC implementations, including solution architecture, development, integrations, deployment, and security design. Translate business requirements into scalable technical solutions, manage data synchronization and third-party integrations, oversee project delivery and teams, and maintain client relationships. Support pre-sales activities, estimations, proposals, upgrades, and patching. The role requires strong ServiceNow scripting, configuration, customization, GRC expertise, security architecture, and client management experience.

Design, implement, govern, and optimize Microsoft 365 Conditional Access solutions using risk-based controls, Zero Trust principles, identity security, MFA, device compliance, and Intune. Manage access policies, troubleshoot access issues, assess policy impact, establish security governance, and collaborate with IAM, endpoint, cybersecurity, and workplace teams as the technical authority for Microsoft 365 access security.

Provides L2 managed-services support for enterprise network security and wireless infrastructure. Responsibilities include troubleshooting routing, switching, WAN, LAN, SD-WAN, firewalls, VPNs, wireless connectivity, authentication, and security incidents. The engineer performs configuration changes, upgrades, RCA, preventive actions, incident and problem management, ISP and OEM coordination, SLA reporting, documentation, and on-call maintenance.

Provide hands-on Oracle ERP Cloud security consulting, including role creation and customization, job and duty roles, function and data security, Segregation of Duties, Risk Management Cloud, Advanced Access Controls, Advanced Financial Controls, and security-sensitive access analysis.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Monitor, triage, and investigate cybersecurity alerts across SIEM, EDR, cloud, endpoint, network, and enterprise environments. Analyze logs, investigate suspicious activity, support incident response and remediation, coordinate escalations, improve detection quality, tune whitelists, and prepare technical reports. Maintain SOC documentation and contribute to operational improvements within a global 24/7 security operations centre.

Designs and manages SSE, SASE, identity management, XDR, and SOC security solutions. Monitors and responds to cybersecurity incidents, enforces security policies, conducts assessments and audits, integrates security with IT infrastructure, and prepares technical documentation. Requires cybersecurity expertise across cloud and hybrid environments, incident handling, malware analysis, digital forensics, networking, encryption, and vulnerability management.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Build and maintain security automation solutions, reusable components, playbooks, apps, and dashboards for Swimlane Turbine and its Marketplace. Translate SOC and MSSP workflows into configurable enterprise content, normalize security data using Python and JavaScript, integrate SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools, and incorporate controlled AI-assisted workflows. Own testing, documentation, versioning, release quality, and cross-functional collaboration.

Advance a proprietary vulnerability database by improving AI pipelines for vulnerability validation, reachability analysis, exploit generation, triage, enrichment, and prioritization. Analyze vulnerabilities, collaborate with zero-day researchers, automate discovery workflows, integrate findings into security pipelines, and author public-facing blogs, advisories, and technical reports. The role requires vulnerability research, production security tooling, AI systems, code analysis, and security communication expertise.

Build and operate scalable backend services, APIs, data pipelines, and distributed systems processing hundreds of millions of events daily. Responsibilities include owning complex features from design through production, maintaining SLAs and SLOs, testing and debugging, supporting on-call operations, improving observability, collaborating across teams, and mentoring junior engineers. The role requires expertise in high-throughput messaging, search and indexing, cloud infrastructure, workflow orchestration, and production reliability.

Own security architecture and engineering across AWS and multi-cloud payment platforms. Lead IAM, Zero Trust, API and application security, threat modeling, CI/CD security automation, vulnerability management, detection engineering, secrets management, supply chain security, incident response, compliance controls, and security tooling. Partner with engineering, infrastructure, product, GRC, vendors, auditors, and executives while mentoring security engineers and building a security-by-design culture.

Design and own end-to-end networking and IT security solutions from opportunity qualification through deployment. Engage customers, assess requirements, architect network and security frameworks, build accurate OEM-specific Bills of Material, create proposals, defend technical solutions, and coordinate with implementation teams. The role also involves mentoring junior engineers, advising on technology trade-offs, and staying current with networking and cybersecurity advancements.

Designs, deploys, operates, and troubleshoots enterprise Cisco and Palo Alto firewall, switching, wireless, routing, VPN, SD-WAN, and SASE infrastructure. Responsibilities include incident escalation, rule-base optimization, network segmentation, change management, vulnerability and patch cycles, audit support, documentation, and mentoring junior engineers. The role requires extensive L3 network security experience and ownership of managed firewall environments.

Configure, implement, monitor, troubleshoot, and document enterprise Network Access Control environments. Manage authentication, authorization, endpoint profiling, posture assessment, VLAN assignment, segmentation, and wired and wireless 802.1X access. Integrate NAC with Active Directory, RADIUS, LDAP, network infrastructure, firewalls, SIEM, and endpoint security tools. Support deployments, upgrades, incident resolution, customer implementations, reporting, and coordination with network, security, infrastructure, OEM, and customer teams.

Conduct web, network, mobile, wireless, thick-client, and source-code penetration testing; perform red-team activities and attack-vector research; document and present VAPT findings; tailor security solutions to client needs; and handle escalations. The role requires strong knowledge of OWASP standards, vulnerability assessment, technical writing, presentations, communication, and customer handling.

Lead the organization's cybersecurity strategy, policies, and compliance. Oversee security operations, incident response, vulnerability management, cloud (Azure/M365) and infrastructure security, SIEM/SOAR, IAM, DLP, vendor risk assessments, audits, training, and security team leadership.

Lead design and implement secure, highly available cloud infrastructure across AWS and Azure. Define cloud strategy, governance, and migration plans. Build IaC with Terraform/Pulumi, implement GitOps/CI-CD, automate provisioning, and enforce networking, security, observability, and disaster recovery practices while guiding engineering teams.