Top Cyber Security Jobs in Pune

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Performs manual penetration testing of web, mobile, API, and microservices applications; conducts secure code reviews and design assessments; identifies and validates vulnerabilities; documents findings; supports remediation and incident response; guides junior testers; and promotes secure coding and application security awareness.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Lead Ness’s global cybersecurity and information security strategy, governance, risk, compliance, data protection, incident response, resilience, and security architecture. Build scalable security operating models and teams, oversee audits and regulatory requirements, establish AI security and governance frameworks for LLMs and GenAI, and advise executive leaders and strategic customers. Partner with technology, delivery, sales, legal, and business stakeholders to strengthen security posture, support customer engagements, and enable responsible business growth.

Monitor, investigate, and respond to cybersecurity events across a global enterprise. Responsibilities include SIEM monitoring, threat hunting, incident response, endpoint and email threat analysis, DLP investigations, firewall policy review, vulnerability assessments, SOC documentation, and playbook development. The role also mentors junior analysts and serves as a senior escalation point during shift operations.

Monitor and investigate security alerts across SIEM, EDR, network, cloud, and identity platforms. Lead incident response for threats such as phishing, malware, lateral movement, and data exfiltration. Develop detection rules, conduct MITRE ATT&CK-based threat hunting, monitor DLP tools, reduce false positives, and document incidents. Communicate technical findings to stakeholders and continuously improve security monitoring and response capabilities.

Supports and maintains privileged access management infrastructure using CyberArk, BeyondTrust, and HashiCorp Vault. Responsibilities include platform monitoring, upgrades, integrations, automation, credential rotation, access governance, troubleshooting, incident resolution, documentation, and audit compliance. The role integrates PAM solutions with enterprise applications, Kubernetes, cloud platforms, and CI/CD pipelines while partnering with global security, infrastructure, DevOps, and application teams.

Lead and operate Identity and Access Management activities including account lifecycle, access role definition, incident response, audits, stakeholder management, onboarding of applications, process improvements, security training, and team leadership. Act as project manager for IAM initiatives and ensure scalable, resilient, and secure IAM operations.

Leads application and API security by embedding security into the software development lifecycle. Owns threat modeling, secure coding standards, CI/CD security controls, vulnerability remediation, software supply-chain risk management, security tooling, developer awareness, automation, and application security metrics. Partners with U.S. and offshore engineering teams to translate security requirements into practical solutions.

Support regional Global Security operations for India & APAC, handling physical and technical security, access control, video review, crisis monitoring, travel risk management, security metrics, vendor/property coordination, training coordination (First Aid/CPR/AED), and administrative security support for regional offices and events.

Lead design, implementation, and delivery of enterprise IAM solutions. Manage assessments, roadmaps, provisioning, SSO, federation, MFA, IGA, PAM, and SailPoint deployments. Support service delivery, incident response, PLM integrations, and stakeholder communication while ensuring compliance with ISO/NIST and cloud security best practices.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Secure and improve Microsoft Azure environments through cloud security guardrails, landing zone governance, identity and access controls, networking, monitoring, encryption, secrets management, and compliance controls. Conduct posture reviews, remediate misconfigurations, support cloud incident investigations, secure infrastructure-as-code deployments, perform architecture reviews, and coordinate with engineering, Security Operations, GRC, and auditors.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Provides 24/7 global client support for enterprise network security environments. Configures, manages, and troubleshoots Cisco FMC/FTD firewalls, VPNs, security policies, IDS/IPS, certificates, LAN/WAN infrastructure, routing and switching, and SD-WAN. Handles security incidents, escalated P1/P2 technical calls, risk remediation, and critical network issues while communicating directly with clients. Supports multi-vendor environments including Cisco and Arista.

Manage enterprise security and privacy controls, assess and mitigate information security risks, and ensure compliance with ISO 27001, NIST, GDPR, CRA, and related standards. The role integrates threat modeling and security practices into software development, develops security baselines and documentation, supports security programs, advises on customer contract controls, and validates the security posture of external vendors and cloud services.

Design, implement, secure, and support Microsoft Azure infrastructure, identity, networking, Windows environments, hybrid cloud platforms, and disaster recovery solutions. Manage Entra ID, Active Directory, authentication, access governance, MFA, Conditional Access, SSO, VPNs, firewalls, WAF, and related technologies. Automate infrastructure using Bicep, Terraform, and Azure Arc; support migrations and troubleshoot complex enterprise issues while providing technical guidance to customers.

Modernize security operations by building SOAR playbooks, AI-augmented investigation workflows, prompt libraries, Jupyter notebooks, response tooling, and integrations across SIEM, EDR, identity, ticketing, threat intelligence, and AI platforms. Partner with SOC and DFIR teams to automate high-effort processes, support major incidents, optimize response outcomes, maintain reusable tooling, and contribute to product roadmaps and technical documentation.

Own product security end to end, including vulnerability identification and remediation, secure SDLC practices, SOC 2 compliance, incident response, access controls, data protection, security tooling, vendor assessments, and audit readiness. Partner directly with engineering teams, review production code, strengthen security culture, communicate risk to leadership and external stakeholders, and support evolving compliance requirements such as ISO 27001.

Conduct security assessments, audits, threat modeling, vulnerability testing, and remediation across IT and business solutions. Translate security strategies into actionable requirements, advise teams on secure-by-design practices, evaluate supplier security, and develop security solutions for corporate infrastructure. The role also involves mentoring colleagues, promoting security policies, and communicating cybersecurity concepts to technical and non-technical stakeholders.

Supports supplier onboarding, qualification, reassessment, monitoring, and remediation across ESG, cybersecurity, compliance, financial, geopolitical, and operational risks. Reviews supplier documentation and cyber assessments, analyzes BitSight or similar risk intelligence data, prepares dashboards and reports, coordinates remediation, maintains risk records, and collaborates with Procurement, Legal, Sustainability, Compliance, Information Security, and suppliers globally.

Design, develop, and verify security and platform features for NVIDIA GPU controllers. Perform firmware and middleware security analysis, threat modeling, code reviews, fuzzing, static and dynamic analysis, and negative testing. Validate security through simulation, emulation, silicon bring-up, and production deployment. Collaborate with hardware, firmware, and system software teams while applying secure coding practices and AI-assisted development tools.

Designs and drives scalable application and product security solutions across enterprise and cloud-native platforms. Advises engineering and business leaders, assesses threats and vulnerabilities, develops reusable security frameworks and architectures, and promotes secure design and coding practices. Requires deep hands-on expertise in Java, Spring Boot, microservices, IAM, cloud security, threat modeling, security testing, and secure software development, along with 15+ years of software development and architecture experience.

Own the GRC engineering program by building continuous control monitoring, common controls frameworks, automated evidence collection, control validation, risk workflows, asset prioritization, and audit-ready reporting. The role integrates identity, cloud, code repositories, endpoints, and ticketing systems; develops policy and control checks in code; guides AI-assisted compliance workflows; tracks program metrics; and represents the technical implementation during audits.