Employment Type : Full-Time, Permanent

Shift Timing : 2 : 00 PM - 11 : 00 PM IST (Cab service provided for both pickup & drop)

Education : B. Tech / Bachelor's Degree in Computer Science, IT, or equivalent (min. 60% standard throughout)

Role Overview :

We are seeking a hands-on Senior Cybersecurity Specialist to lead the operational implementation and maturation of core security controls across engineering, infrastructure, and application environments. You will directly integrate security into CI/CD pipelines, execute IAM/PAM access policies, manage EDR/XDR endpoint protection, enforce data privacy (PII/HSPII), and oversee vulnerability assessments (VAPT).

Key Responsibility Areas :

1. DevSecOps & Secure SDLC (SSDLC) :

- Pipeline Security : Integrate static/dynamic code analysis (SAST, DAST) and Software Composition Analysis (SCA) directly into CI/CD pipelines.

- Remediation & Hardening : Partner with software development teams to remediate code-level vulnerabilities and define baseline configurations for microservices, web applications, and REST APIs.

2. Identity & Access Management (IAM / PAM) :

- Access Control : Implement and enforce Role-Based Access Control (RBAC), Least Privilege, Multi-Factor Authentication (MFA), and periodic access reviews.

- Privileged Monitoring : Oversee Privileged Access Management (PAM) mechanisms, onboarding/offboarding workflows, and continuous session auditing.

3. Security Testing & Vulnerability Management (VAPT) :

- Assessment Lifecycle : Execute vulnerability scanning, validation, risk prioritization, and remediation tracking across network, cloud, and application endpoints.

- Penetration Testing : Coordinate third-party VAPT assessments, validate fix deployments, and maintain audit-ready technical evidence logs.

4. Endpoint Security & Security Operations (SOC) :

- EDR/XDR Management : Deploy and maintain EDR/XDR solutions, disk encryption standards, OS patching baselines, and configuration hardening.

- SIEM & Incident Response : Tune SIEM log ingestion rules to identify high-fidelity threats while minimizing false positives. Lead containment, eradication, and post-incident root-cause analysis (RCA).

5. Governance, Compliance & Data Protection (ISO 27001, PCI-DSS, DPDP) :

- Data Security : Implement encryption (at-rest & in-transit), masking, and access controls for PII / Highly Sensitive PII (HSPII) in compliance with privacy regulations (e.g., DPDP).

- Framework Compliance : Maintain operational technical controls for PCI-DSS and ISO 27001 / ISO 27002 audits.

- AI & Third-Party Risk : Establish security governance for sensitive data used in AI/ML pipelines and conduct technical vendor risk assessments.

Technical Skills & Stack :

- Security Tools : SAST/DAST/SCA tools, IAM/PAM platforms, EDR/XDR, SIEM, Vulnerability Scanners (Nessus/Qualys/InsightVM).

- Frameworks & Standards : ISO 27001, NIST CSF, PCI-DSS, Zero Trust Architecture, DPDP.

- Cloud Security : Experience securing AWS, Azure, or GCP cloud environments.

Preferred Certifications :

- CISSP, CISM, or CISA

- AZ-500 / AWS Certified Security - Specialty

- CEH, Security+, or GIAC certifications