Top Cyber Security Jobs in Pune

Senior Product Manager responsible for defining and delivering shared services for SailPoint’s enterprise identity security platform. The role partners with Product, Design, Engineering, and stakeholders to guide SaaS and cloud capabilities from discovery through launch, prioritize roadmaps, define requirements, track adoption metrics, and shape long-term platform strategy. The position is hybrid in Pune and requires approximately 15% travel.

Leads the enterprise Human Risk Management program, including security awareness, phishing resilience, role-based cybersecurity education, mandatory training, behavior-change initiatives, risk metrics, dashboards, governance, and executive reporting. Partners with security, HR, legal, technology, and business teams to reduce human-related cybersecurity risk. Evaluates awareness platforms, develops security culture programs, uses automation and AI, and maintains audit-ready documentation and continuous-improvement practices.

Facilitate Scrum ceremonies, coach teams on Agile and Jira practices, track delivery metrics, remove impediments, and support product backlog management. The role also assists with project planning, risk management, stakeholder communications, and change management while developing toward full project ownership. It additionally requires information security, compliance, risk management, and Identity and Access Management experience, along with security standards implementation and awareness training.

Lead advanced cybersecurity incident response, including alert escalation, threat detection, log analysis, malware and forensic investigation, containment, eradication, and recovery. Support threat hunting, improve detection logic and automation, maintain incident response playbooks, conduct regulatory reporting, and collaborate with engineering, legal, IT, and leadership. Mentor junior analysts and lead high-severity incident response activities across on-premises, cloud, and hybrid environments.

The Product Security Engineer partners with development teams to secure cloud-native and SaaS products throughout the software development lifecycle. Responsibilities include threat modeling, security assessments, secure design reviews, cloud security investigations, automation of security controls and detection, incident remediation, stakeholder guidance, and continuous improvement of security processes and tooling.

Lead Oracle Procure-to-Pay Cloud implementations and support engagements. Gather requirements, analyze process gaps, design and configure solutions, manage integrations and data migration, create documentation, conduct testing and user training, provide post-go-live support, and manage multiple client projects. Travel to client locations as required.

Lead product security initiatives across the software development lifecycle. Conduct threat modeling and security assessments, review cloud application designs, build security automation and detection controls, support cloud incident response, and guide engineering teams on secure development. The role also requires identifying AI/LLM risks, collaborating with technical and non-technical stakeholders, improving security processes, and mentoring security practitioners.

Leads cybersecurity data-source onboarding and integration for Zscaler’s security platform. Builds and automates Python/API-based data transformations, maps and normalizes security data, manages pipeline lifecycle activities, troubleshoots data quality, and identifies security gaps. Partners with cybersecurity SMEs and cross-functional teams to create implementation plans, communicate technical findings, and provide product improvement feedback. The role requires expertise in security platforms, diverse security-tool integrations, data modeling, SQL, and Python.

Performs manual penetration testing of web, mobile, API, and microservices applications; conducts secure code reviews and design assessments; identifies and validates vulnerabilities; documents findings; supports remediation and incident response; guides junior testers; and promotes secure coding and application security awareness.

Lead and operate Identity and Access Management activities including account lifecycle, access role definition, incident response, audits, stakeholder management, onboarding of applications, process improvements, security training, and team leadership. Act as project manager for IAM initiatives and ensure scalable, resilient, and secure IAM operations.

Leads application and API security by embedding security into the software development lifecycle. Owns threat modeling, secure coding standards, CI/CD security controls, vulnerability remediation, software supply-chain risk management, security tooling, developer awareness, automation, and application security metrics. Partners with U.S. and offshore engineering teams to translate security requirements into practical solutions.

Support regional Global Security operations for India & APAC, handling physical and technical security, access control, video review, crisis monitoring, travel risk management, security metrics, vendor/property coordination, training coordination (First Aid/CPR/AED), and administrative security support for regional offices and events.

Lead design, implementation, and delivery of enterprise IAM solutions. Manage assessments, roadmaps, provisioning, SSO, federation, MFA, IGA, PAM, and SailPoint deployments. Support service delivery, incident response, PLM integrations, and stakeholder communication while ensuring compliance with ISO/NIST and cloud security best practices.

Monitor and investigate security alerts across SIEM, EDR, network, cloud, and identity platforms. Handle high-severity incidents through containment, eradication, recovery, and documentation. Develop detection rules, conduct MITRE ATT&CK-based threat hunting, monitor DLP tools, reduce false positives, and improve security monitoring and response capabilities.

Engineer product security tools and testing across the secure software development lifecycle. Responsibilities include operating SAST, DAST, and software composition analysis scans; producing SBOMs; developing threat models; integrating cybersecurity assessments; supporting vulnerability response; maintaining security tooling; and advising on mitigations. The role also contributes to product security strategy for medical devices, connected infrastructure, and software applications while collaborating with product and engineering stakeholders.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Modernize security operations by building SOAR playbooks, AI-augmented investigation workflows, prompt libraries, Jupyter notebooks, response tooling, and integrations across SIEM, EDR, identity, ticketing, threat intelligence, and AI platforms. Partner with SOC and DFIR teams to automate high-effort processes, support major incidents, optimize response outcomes, maintain reusable tooling, and contribute to product roadmaps and technical documentation.

Engineer, operate, and improve global enterprise security platforms across endpoint, identity, email, network, cloud, vulnerability management, privileged access, and security monitoring. The role supports Zero Trust, M&A integrations, cloud transformation, CyberArk, Microsoft security, and SIEM modernization initiatives. Responsibilities include platform ownership, automation, troubleshooting, documentation, security control integration, regulatory support, and collaboration with architecture, infrastructure, SOC, identity, and technology teams.

Monitors Global Payments’ network for emerging threats, investigates security events, supports incident containment and remediation, and configures security systems. The role assesses risks related to architecture, software, access changes, vulnerabilities, and compliance requirements. It also contributes to security audits, threat modeling, incident response, and information security process improvements involving PCI, ISO, HIPAA, and PII standards.

Leads specialized information security functions, including security engineering, architecture, forensics, threat intelligence, threat hunting, and penetration testing. Manages security controls, incident response, vulnerability mitigation, access control, security technology deployments, forensic investigations, threat assessments, and remediation efforts. Guides security roadmaps, policies, procedures, and complex projects while advising business leaders on breach risks and protective measures.

Manages an information security penetration testing team, providing technical guidance, overseeing testing tools and report delivery, coordinating project priorities, resolving issues, and maintaining team quality and performance metrics. Requires extensive hands-on penetration testing experience, leadership capability, security tooling expertise, and the ability to obtain and maintain a government-level security clearance.

Monitors network threats, investigates security events, handles incidents, configures security systems, assesses vulnerabilities and risks, and supports security audits and compliance. The role analyzes logs and threat intelligence, develops emerging threat models, evaluates technology and architecture changes, and contributes to containment, remediation, and secure system design. It requires familiarity with security operations, intrusion detection, SIEM, penetration testing, web application assessment, secure coding, and compliance standards including PCI, SOX, and GLBA.

Supports supplier onboarding, qualification, reassessment, monitoring, and remediation across ESG, cybersecurity, compliance, financial, geopolitical, and operational risks. Reviews supplier documentation and cyber assessments, analyzes BitSight or similar risk intelligence data, prepares dashboards and reports, coordinates remediation, maintains risk records, and collaborates with Procurement, Legal, Sustainability, Compliance, Information Security, and suppliers globally.

Design, develop, and verify security and platform features for NVIDIA GPU controllers. Perform firmware and middleware security analysis, threat modeling, code reviews, fuzzing, static and dynamic analysis, and negative testing. Validate security through simulation, emulation, silicon bring-up, and production deployment. Collaborate with hardware, firmware, and system software teams while applying secure coding practices and AI-assisted development tools.

Designs and drives scalable application and product security solutions across enterprise and cloud-native platforms. Advises engineering and business leaders, assesses threats and vulnerabilities, develops reusable security frameworks and architectures, and promotes secure design and coding practices. Requires deep hands-on expertise in Java, Spring Boot, microservices, IAM, cloud security, threat modeling, security testing, and secure software development, along with 15+ years of software development and architecture experience.