Cyber Security Expert

Key Responsibilities:

• Design and enforce security architecture across all environments (Dev, Stage, Prod, DR).
• Conduct regular VAPT (Vulnerability Assessment and Penetration Testing) and threat modeling.
• Define and monitor policies for encryption, identity access management (IAM), and secure coding.
• Implement real-time alerting and SIEM tools for system and app security.
• Work with developers to review code and dependencies for CVEs and OWASP vulnerabilities.
• Ensure tokenization, masking, and key management policies are in place.
• Assist in audits (internal, PCI-DSS, RBI, ISO) and maintain compliance documentation.
• Develop incident response plans and lead red/blue team exercises.

Required Skills:

• 5+ years in application or infrastructure security roles.
• Deep understanding of PCI-DSS, ISO 27001, RBI cybersecurity norms.
• Experience with SIEM (e.g., Splunk, Wazuh), WAFs, firewalls, and intrusion detection tools.
• Familiarity with TLS certs, HSMs, secrets management, and secure APIs.
• Strong scripting skills (Python, Bash) for automating security checks.
• Previous experience in securing financial systems or payment gateways is a must.