Cyber Security Specialist

What will you drive at Cars24?

As a Lead – Cyber Security, you will own and elevate the security posture for one of India’s largest and fastest-moving digital commerce ecosystems. You will:

Endpoint & Infrastructure Security

• Lead the strategy and deployment of enterprise-grade endpoint protection, detection, and response across Cars24’s multi-entity environment.
• Build scalable processes for continuous monitoring, threat detection, and rapid response across global device fleets.
• Oversee hardening baselines, periodic vulnerability scans, control audits, and remediation plans.

Incident Response & Threat Management

• Lead investigations for security incidents, ensuring high-quality RCA, impact analysis, and corrective actions.
• Build repeatable IR playbooks and automate components such as log analysis, correlation, and incident reporting.
• Drive mitigation strategies for vulnerabilities across services, applications, and internal systems.

Cloud, Network & Access Security

• Architect and mature Cars24’s cloud and network security posture, with a focus on identity, access governance, micro-segmentation, and least-privilege enforcement.
• Strengthen gateway and perimeter security controls (DDoS, WAF, rate-limiting, routing hygiene, DNS security, secure CDN practices).
• Partner with Infra, SRE, and Platform teams to embed security into CI/CD pipelines and cloud operations.

Secure Development & Application Security

• Define and mature Cars24’s secure SDLC framework, integrating developer-friendly security checkpoints.
• Lead org-wide adoption of application security best practices, including threat modelling, dependency risk management, secure coding patterns, and automated guardrails.
• Champion OWASP-aligned practices for web and mobile applications.

Governance, Risk & Compliance

• Align security practices with Cars24’s compliance roadmap (ISO, SOC, CIS, NIST) and lead internal audits/readiness.
• Maintain strong relationships with business, legal, and cross-functional teams to drive enterprise security maturity.
• Build dashboards, evidence pipelines, and reporting frameworks for leadership and board-level visibility.

Leadership & Influence

• Mentor and guide junior engineers, fostering a high-ownership, automation-first culture.
• Shape the long-term security architecture and influence technical decisions across product and engineering.
• Drive security-first thinking across all business units and new initiatives at Cars24.

Who are we looking for?

• 6–10 years

  of deep experience in cybersecurity across cloud-native, distributed, and high-growth tech environments.
• Proven ability to

  design, implement, and scale security programs

  for large, multi-entity organizations.
• Strong understanding of modern security principles across endpoint security, identity & access management, cloud security, and application security.
• Experience working hands-on with

  cloud security

  , identity governance, network security controls, and enterprise security operations.
• Ability to translate complex security risks into actionable engineering roadmap and leadership-friendly communication.
• Familiarity with industry frameworks such as

  CIS, NIST, ISO

  , and experience supporting compliance initiatives.
• Strong stakeholder management skills, capable of influencing engineering, infra, SRE, product, and business teams.
• A mindset focused on

  automation

  , scalability, and proactive defense.

We believe in diversity, equal opportunity, and building a secure and inclusive digital experience for every customer and employee at Cars24.