Top Cyber Security Jobs in Pune

Lead and conduct security assessments, implement secure-by-design practices across IT and business solutions, translate strategies into actionable requirements, evaluate supplier security, identify and remediate vulnerabilities, develop security solutions for corporate infrastructure, and mentor junior team members.

Lead offensive security activities including vulnerability management, deep-dive penetration testing (infrastructure, web, mobile), red teaming/assume-breach simulations, telecom-targeted attacks, APT simulation using MITRE ATT&CK, attack surface and dark-web monitoring, and producing PoCs and remediation roadmaps while mentoring Blue Team members.

Lead application security efforts by governing vulnerability management, automating security workflows, embedding SSDLC practices, partnering with engineering/GRC to meet compliance, and serving as a security SME during incident response and customer escalations.

Design and implement SAP authorization concepts and role design, secure custom transactions and maintain SU24. Configure and manage SAP GRC Access Control and BRF+, ensure Segregation of Duties and SOX/ITGC compliance, support audits, collaborate cross-functionally (Functional, Developers, BASIS), refine security processes, test/implement changes, and document security requirements.

Perform information security and risk activities including implementing and enforcing security controls, incident response, threat management, vulnerability scanning, malware management, intrusion detection, risk assessments, and backup/disaster recovery planning. Work on moderate-scope projects with general guidance and apply judgment within defined parameters.

Lead design and implementation of cloud security controls across AWS and Azure; maintain CSPM and SOC 2 controls; secure container/Kubernetes environments; perform threat modeling, security architecture reviews, continuous vulnerability/compliance validation, incident monitoring/response, and collaborate with engineering teams to embed security practices.

Monitor and analyze security, system, application, and cloud logs for anomalies and incidents; use SIEM/SOAR/EDR and CSPM tools; coordinate incident response with cross-functional teams; maintain SOPs, playbooks, vulnerability assessments, and documentation; own shift responsibilities in a 24/7 SOC rotation.

Analyze security incidents and document findings clearly, producing tailored reports with root cause analysis, impact assessment, and remediation recommendations. Track and follow up on vulnerabilities, collaborate with SOC and IT teams, refine documentation processes, and support compliance and knowledge-base development.

Lead data security posture and DLP efforts: discover/classify sensitive data, assess and remediate data risks, enforce least privilege, monitor incidents, maintain DLP/DSPM tooling, ensure compliance (e.g., GDPR, DORA), and advise on securing AI/LLM training data.

Lead IT audit and compliance activities, perform risk assessments, identify vulnerabilities across networks, applications, databases and cloud platforms, analyze audit data, recommend remediation, ensure IT governance alignment, and communicate findings to technical and non-technical stakeholders while collaborating with cross-functional teams.

Entry-level Identity and Security Engineer role for freshers, focused on identity and security engineering tasks in an offshore setup. Suitable for candidates beginning a career in cybersecurity and identity management.

Design, build, test, and deploy scalable full-stack applications with emphasis on Java backend services and modern front-end frameworks. Implement cloud-native microservices, REST APIs, containerization, CI/CD pipelines, and support production performance, security, and observability in an Agile environment.

Developers who identify and fix security defects by applying OWASP secure coding practices. Learn existing codebases, locate vulnerabilities, and remediate issues by writing secure, best-practice code with minimal supervision.

Lead PCI DSS compliance for API and payment gateway services. Implement security controls, perform secure code reviews, vulnerability management, incident response, audit preparation, and train teams on security best practices while collaborating with DevOps, IT, and legal.

Lead perimeter and cloud edge security operations focused on WAF, API and email protections. Monitor SIEM/logs, analyze web traffic, tune WAF/bot protections, respond to incidents, coordinate with threat intel, vulnerability management and business ISOs, and advise stakeholders to improve external defense posture.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Investigate and remediate firmware vulnerabilities, perform security analysis of firmware and update mechanisms, support secure boot and signing, conduct threat modeling and risk assessments, maintain SBOMs and supplier security documentation, ensure alignment with product cybersecurity standards, and collaborate with firmware, QA, and compliance teams to embed security-by-design.

Lead application security by shifting left: perform threat modeling and secure design reviews, deploy SAST/DAST/SCA/secrets scanning, integrate security into CI/CD, run code reviews, track remediation SLAs, maintain asset inventory, lead Security Champions, train developers, and evaluate security tools and automation.

Lead threat modeling for AWS applications, integrate security into cloud designs, assess and mitigate risks, automate security tooling, support incident response and vulnerability management, ensure compliance, and train/mentor engineering teams on AWS security best practices.

Analyze application risks and implement security controls for web, mobile, and cloud platforms. Perform vulnerability assessments, drive remediation with engineering teams, and integrate security into SDLC/CI-CD pipelines. Ensure adherence to OWASP and security benchmarks, monitor cloud configurations for risks, and implement identity, access, and data protection controls.

Monitor, investigate, and respond to security alerts using SIEM/SOAR and EDR/XDR. Triage incidents, perform network and endpoint forensics, lead incident response activities, threat hunt, leverage MITRE ATT&CK, and collaborate with engineering and operations to remediate risks and improve SOC processes. Participate in shift/on-call coverage and produce security metrics and documentation.

Manage end-to-end delivery of managed services focused on vulnerability remediation, SLA-driven outcomes, SDLC compliance, stakeholder communication, team ramp-up, and adoption of automation and AI to improve throughput and reduce risk.

Lead and own threat modeling for GCP-hosted systems: identify threats, vulnerabilities, and mitigations; integrate threat modeling into SDLC and CI/CD; advise on controls, conduct risk assessments, support incident post-mortems, mentor teams, and drive threat-modeling tool adoption and training.

Design, implement, monitor, and secure hybrid cloud and infrastructure environments. Lead SOC 2 Type II audit support, manage SIEM (Microsoft Sentinel), conduct incident response, threat hunting, vulnerability management, and implement cloud security across Azure and AWS. Automate security operations, maintain identity and privileged access controls, support infrastructure modernization, and document compliance and playbooks.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.