Top Cyber Security Jobs in Pune

Supports cybersecurity issue and control management across Mastercard’s technology environment. Responsibilities include triaging and validating security issues in Archer, reviewing risk statements and control mappings, evaluating remediation plans and evidence, assessing compensating controls, tracking risk treatment, supporting control assessments, and producing governance reporting. The role partners with engineering, risk, compliance, and governance stakeholders to drive remediation or risk acceptance and maintain audit-defensible documentation.

Performs manual penetration testing of web, mobile, API, and microservices applications; conducts secure code reviews and design assessments; identifies and validates vulnerabilities; documents findings; supports remediation and incident response; guides junior testers; and promotes secure coding and application security awareness.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Modernize security operations by building SOAR playbooks, AI-augmented investigation workflows, prompt libraries, Jupyter notebooks, response tooling, and integrations across SIEM, EDR, identity, ticketing, threat intelligence, and AI platforms. Partner with SOC and DFIR teams to automate high-effort processes, support major incidents, optimize response outcomes, maintain reusable tooling, and contribute to product roadmaps and technical documentation.

Provide operational support and development for enterprise identity and access systems (Ping Identity/ForgeRock). Build features, perform unit testing, create QA test steps, update ITSM/process documentation, troubleshoot incidents, mentor juniors, and collaborate with global security, development, and product teams to improve authentication, SSO/MFA, and identity governance.

Lead enterprise architecture strategy and standards, align IT strategy with business goals, advise executives on technical tradeoffs, guide cross-domain integration and cloud decisions, drive governance and M&A architecture, mentor senior leaders, and enable scalable architecture practices across the organization.

Provide advanced cybersecurity monitoring, incident triage, digital forensics, malware analysis, threat hunting, and incident response across on-premises, cloud, and hybrid environments. The role escalates complex security incidents, leads containment and recovery, improves detection logic and automation, maintains response playbooks and procedures, supports regulatory reporting, and mentors junior analysts. Collaboration with engineering, legal, IT, and leadership is required during high-severity incidents.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Lead design, implementation, and delivery of enterprise IAM solutions. Manage assessments, roadmaps, provisioning, SSO, federation, MFA, IGA, PAM, and SailPoint deployments. Support service delivery, incident response, PLM integrations, and stakeholder communication while ensuring compliance with ISO/NIST and cloud security best practices.

Leads product security for automation products by establishing security standards, processes, and guidelines; managing vulnerabilities; advising senior management on risk; coordinating security initiatives; reviewing exceptions; and developing security roadmaps. The role researches industrial control systems, embedded, cloud, hardware, and application security, represents the department with customers, and influences secure development practices across global teams.

Engineer product security tools and testing across the secure software development lifecycle. Responsibilities include operating SAST, DAST, and software composition analysis scans; producing SBOMs; developing threat models; integrating cybersecurity assessments; supporting vulnerability response; maintaining security tooling; and advising on mitigations. The role also contributes to product security strategy for medical devices, connected infrastructure, and software applications while collaborating with product and engineering stakeholders.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Owns end-to-end vulnerability management across products and supporting technology, including validating findings, prioritizing risk, tracking remediation, and reporting. Partners with Engineering, Product, Infrastructure, and security tooling teams to improve vulnerability remediation, CI/CD security integration, software supply chain security, and cloud security controls. Reviews SAST, DAST, SCA, secrets scanning, penetration testing, web application, and CSPM findings while researching emerging cloud threats and systemic vulnerabilities.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Lead SOC alert triage, incident investigation, containment, eradication, and recovery. Correlate SIEM, EDR, network, cloud, and identity data; develop detections and playbooks aligned with MITRE ATT&CK; mentor analysts; support threat hunting, purple team exercises, reporting, audits, and continuous improvement. The role requires shift, weekend, and holiday coverage.

Designs and guides secure enterprise technology solutions across infrastructure, applications, data, cloud, identity, and emerging technologies. Responsibilities include serving as security design authority, translating policies into controls, conducting risk assessments and threat modeling, evaluating technologies, collaborating with technical teams, documenting architecture decisions, and supporting enterprise cyber strategy. Requires extensive cybersecurity or infrastructure experience, architecture expertise, knowledge of security frameworks, and strong communication skills.

Performs manual white-box penetration testing, application security assessments, vulnerability hunting, and code reviews across Atlassian software, platforms, and services. Partners with security, engineering, and infrastructure teams to validate technical controls and strengthen security. The role requires understanding web application and cloud security, coding in Java, Python, or Go, leading projects, mentoring practitioners, and communicating with technical teams.

Modify and improve GCC, LLVM, and proprietary compilers for security and code hardening. Analyze source and assembly code, address vulnerabilities, implement countermeasures, and coordinate security measures with compiler, hardware, and application teams. The role also involves distributed systems, full-stack development, databases, caching, containerization, orchestration, compiler technology, and potentially LLM-based security testing and offensive evaluation.

Supports product cybersecurity regulatory compliance and certification readiness across digital products. Maintains unified control frameworks, prepares SOC 2 and regulatory evidence packs, coordinates audits and remediation, assesses product obligations under SOC 2, NIS2, the EU AI Act, and EU Cyber Resilience Act, and produces leadership reports on certification readiness, audit trends, evidence maturity, and compliance risks.

Leads enterprise IT security and non-human identity governance programs, including identity inventory, risk classification, CI/CD and container identity, secrets management, AI agent governance, API key controls, MCP access, audit trails, shadow AI discovery, incident response, compliance, executive reporting, budgeting, and cross-department security strategy.

Lead and scale multiple security and access management programs across engineering and cloud operations. Plan and oversee technical initiatives, collect requirements, drive automation for governance, mitigate risks, and deliver dashboards/KPIs to Executive Leadership. Advocate tooling and improve traceability for security, compliance, and risk initiatives.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

Develop and support application and product security tools, processes, and secure development practices. Identify vulnerabilities and threats across applications, embedded devices, cloud systems, and IT environments. Maintain code management and CI/CD pipelines, support vulnerability management, advise regional engineering teams, and contribute to security programs. The role also provides cross-functional support, technical documentation, mentoring, and regional and global security assistance.

Manage information security, privacy, compliance, customer security requests, and third-party risk for a cloud SaaS platform. Responsibilities include responding to RFPs and questionnaires, maintaining security controls and evidence, coordinating audits, managing policies, conducting vendor assessments, tracking corrective actions, and collaborating with engineering, legal, privacy, HR, and customer teams across SOC 2, ISO, HIPAA, and related frameworks.