Jobs
Interviews

345 Vapt Jobs - Page 3

Setup a job Alert
JobPe aggregates results for easy application access, but you actually apply on the job portal directly.

3.0 - 8.0 years

13 - 17 Lacs

mumbai

Work from Office

As a Lead Information Security Resiliency and Vulnerability Assessment & Penetration Testing Manager, you will be responsible for defining the scope for annual Vulnerability Assessment & Penetration Testing (VAPT) activity and handling end-to-end third party VAPT assessment activity. The selected applicant, would be accountable for managing organizations cyber resiliency and for implementing cyber resilience goals. Key Responsibilities Identify Opportunities Icon Business Understanding Understanding/Knowledge of information security domains, risks, mitigation and overall management. Experience and knowledge of servers, networks, security devices etc. Collaborate Interaction with various stakeholders/teams on daily basis. Ability to communicate effectively with Heads of various teams. Proactively coordinating with different teams for tracking and closure of open observations and escalating when necessary. Vendor Management Facilitating the vendor with requirements for carrying out the VAPT assessment. Vendor selection, evaluation and finalization for the annual Vulnerability Assessment & Penetration Testing (VAPT) activity. Candidate should review the draft reports shared by vendors and suggest if any changes required, Validation of final reports. Timely communication of final reports to relevant stakeholders. Qualifications & Skills Educational Qualification Engineering Graduate in CS, IT, EC or InfoSec, CyberSec or MCA equivalent. Certifications ISO27001, CISSP, CISM Compliance Candidate should validate the security controls deployed across DC, DR, NDR and COLO environment and prepare the quarterly resiliency report to share with senior management. Synergize with Team Ability to work collaboratively with different teams for closure of activities. Strong analytical and problem-solving skills. Experience in the banking domain will add an advantage. Strong understanding and hands-on experience of VAPT activity and Information Security resiliency. Communication skills Excellent communication and interpersonal skills.

Posted 2 weeks ago

Apply

7.0 - 10.0 years

11 - 16 Lacs

bengaluru

Work from Office

We are looking for a highly skilled and motivated Product & Solution Security Professiona l to join our team with 7 to 10 years of experience in cybersecurity, with a focus on application security and Having An engineering degree B.E/B.Tech/MCA/M.Tech/M.Sc with good academic record with proven experience working with software development teams and integrating security practices into the SDLC. Experience interacting with key collaborators and supporting security activities within software products The ideal candidate will be responsible for defining secure design principles and supporting multi-functional teams to ensure secure architecture, implementation, and testing of products and solutions. Key Responsibilities: Integration with SDLC: Collaborate with software development teams to integrate security practices throughout the Software Development Life Cycle (SDLC). Ensure security requirements are included in the design, development, testing, and deployment stages of software projects. Perform security code reviews and analyze vulnerabilities during different SDLC phases. 2. Security Activities: Develop and implement security protocols, guidelines, and standard processes for software development. Conduct threat modelling and risk assessments to identify potential security issues early in the development process. Provide guidance on secure coding practices and remediation of identified vulnerabilities. 3. Stakeholder Interaction: Work closely with key stakeholders, including product managers, project managers, and business analysts, to support and promote security activities within products. Communicate security risks, issues, and mitigation strategies effectively to both technical and non-technical collaborators. Foster a security-aware culture within the development teams and across the organization. 4. Security Tools and Technologies: Implement and manage security tools such as static and dynamic analysis tools and vulnerability scanners. Stay updated with the latest security tools, trends, and standard processes to enhance products security posture. 5. Training and Awareness: Conduct security training and awareness programs for development teams. Promote continuous improvement related to application security. Skills and Qualifications: Technical Skills: In-depth knowledge of application security, secure coding practices, and common vulnerabilities (e.g., OWASP Top Ten). Experience with security tools and technologies such as static analysis tools (SAST), dynamic analysis tools (DAST), and vulnerability scanners. Proficiency in programming languages such as Java, C#, Python. Understanding of DevSecOps practices and integration of security into CI/CD pipelines. 2. Soft Skills: Strong communication and interpersonal skills. Ability to explain complex security concepts to non-technical collaborators. Strong analytical and problem-solving skills. Collaborative approach and ability to work effectively with multi-functional teams. 3. Certification Preferred: CEH, Certified Secure Software Lifecycle Professional (CSSLP) or equivalent.

Posted 2 weeks ago

Apply

3.0 - 5.0 years

10 - 14 Lacs

bengaluru

Work from Office

- Information Security Manager shall be primarily responsible to : - Run and manage the BAU security infosec operations - Create and maintain ISMS Policy and Process documents - Ensure Infosec compliance with RBI and other regulatory agencies - Participate in IT Infosec Audits and ensure closure of observations within given timeliness - Conduct regular VAPT (Vulnerability Assessments) and track closure of open observations - Identifying and evaluating new IT security technologies and services and implementing it - Ensure cyber security related polices and technologies are in place - Conducting regular Inforsec Awareness within users in the organization - The person needs to work closely with the CISO and other stakeholders Risk, IT and Audit teams. - The position will based at CreditAccess Grameen HQ in Bangalore, and may require short term travel on need basis to other CAGL offices. Key Accountability: - Ensuring adequate security controls are in place & working effectively within the organization for information & cyber security - Ensuring effectiveness of all IT controls to prevent any unauthorized access or activities at a system administration level - Identify potential security weaknesses through vulnerability assessments and track them to closure within the timeliness -Tracking and reporting key risk indicators defined for IT processes - Create and maintain the documentation for information system audits in accordance with regulatory and compliance requirements - Create Review ISMS policy and process - Implement Strategic IT Infosec projects to strengthen the overall IT Security posture at CAGL

Posted 2 weeks ago

Apply

9.0 - 14.0 years

20 - 35 Lacs

pune, chennai, bengaluru

Hybrid

Location: Pan India Job Title: Infra VAPT & Mobile AppSec Experience: 12-15 Years Job Description: Lead and manage a team of VAPT professionals, overseeing vulnerability assessments and penetration testing for infrastructure and mobile applications. Plan, execute, and review security assessments for networks, servers, cloud environments, and mobile apps (Android/iOS). Ensure high-quality reporting and effective remediation guidance for identified vulnerabilities. Mentor and develop team members, allocate tasks, and monitor project delivery. Liaise with stakeholders to communicate risks and coordinate remediation efforts. Maintain up-to-date knowledge of security threats, tools, and best practices. Requirements: 12-15 years of relevant experience in Infra VAPT and Mobile AppSec. Strong leadership and team management skills. Hands-on expertise with VAPT tools and methodologies. Excellent communication and problem-solving abilities. Relevant certifications (e.g., OSCP, CISSP, CEH) preferred.

Posted 2 weeks ago

Apply

3.0 - 5.0 years

12 - 14 Lacs

mumbai

Work from Office

Job Summary We are seeking a skilled Logic App Developer to join our dynamic team. The ideal candidate will have 3 to 4 years of experience in developing and maintaining Logic Apps, with a strong understanding of cloud-based solutions and integration services. Responsibilities: Design, develop, and maintain Logic Apps to automate workflows and integrate various systems. Collaborate with cross-functional teams to gather requirements and deliver solutions that meet business needs. Troubleshoot and resolve issues related to Logic Apps and integration services. Manage Logic App server and perform performance tuning on the flows. Optimize Logic Apps for performance and scalability. Stay updated with the latest trends and best practices in Logic App development and cloud integration. Take complete ownership of development and manage the development team. Requirements: Bachelors degree in computer engineering, Information Technology, or a related field. 3 to 4 years of experience in Logic App development. Proficiency in Azure Logic Apps, Azure Functions, and other cloud-based integration services. Strong understanding of RESTful APIs, JSON, and XML. Experience with version control systems like Git, BitBucket. Experience in Ticket management tools like JIRA. Understand and implement VAPT security patches. Excellent problem-solving skills and attention to detail. Ability to work independently and as part of a team. Strong communication skills

Posted 2 weeks ago

Apply

5.0 - 9.0 years

5 - 12 Lacs

bengaluru, mumbai (all areas)

Work from Office

Direct Responsibilities To perform Penetration testing (Gray Box and/or Black Box), for Web applications, Thick Client, API, and mobile applications. Understand and deep knowledge of application security engineering principles to follow secure development practices which includes secure build processes, secure code review, security testing. Understanding of the security tools in DevOps Processes Knowledge of one or more scripting languages for automation Collaborate with the developers to help them understand the vulnerabilities reported in application. Contributing Responsibilities To understand the applications security requirements and identify & document the scope of the test. Ensure execution of the documented security scenarios for the application under test. Document and report all findings. Escalate issues to the local management and onshore stakeholders in case it affects the testing progress. Ensure processes for the project is followed for the assessments. Help review peer's work and mentor junior members in the team. Ankita Bhagat Talent Acquisition Human Resources, Kiya.ai Email ID: ankita.bhagat@kiya.ai Mobile Number : 7738314200 www.kiya.ai

Posted 2 weeks ago

Apply

1.0 - 3.0 years

3 - 7 Lacs

bengaluru

Work from Office

- Information Security Manager shall be primarily responsible to : - Run and manage the BAU security infosec operations - Create and maintain ISMS Policy and Process documents - Ensure Infosec compliance with RBI and other regulatory agencies - Participate in IT Infosec Audits and ensure closure of observations within given timeliness - Conduct regular VAPT (Vulnerability Assessments) and track closure of open observations - Identifying and evaluating new IT security technologies and services and implementing it - Ensure cyber security related polices and technologies are in place - Conducting regular Inforsec Awareness within users in the organization - The person needs to work closely with the CISO and other stakeholders Risk, IT and Audit teams. - The position will based at CreditAccess Grameen HQ in Bangalore, and may require short term travel on need basis to other CAGL offices. Key Accountability: - Ensuring adequate security controls are in place & working effectively within the organization for information & cyber security - Ensuring effectiveness of all IT controls to prevent any unauthorized access or activities at a system administration level - Identify potential security weaknesses through vulnerability assessments and track them to closure within the timeliness -Tracking and reporting key risk indicators defined for IT processes - Create and maintain the documentation for information system audits in accordance with regulatory and compliance requirements - Create Review ISMS policy and process - Implement Strategic IT Infosec projects to strengthen the overall IT Security posture at CAGL

Posted 2 weeks ago

Apply

8.0 - 12.0 years

22 - 30 Lacs

pune, bengaluru, mumbai (all areas)

Hybrid

Location : Mumbai, Bangalore, Pune, Chennai ,Hyderabad, Kolkata, Kochi, Coimbatore, Mysore, Nagpur, Bhubaneswar, Indore, Warangal We are looking for a skilled Security Engineer to join our platform engineering team The successful candidate will be responsible for designing implementing and managing security measures to protect our systems applications and data from potential threats and vulnerabilities This role involves collaborating with various teams to ensure the security and integrity of our digital infrastructure. Key Responsibilities Develop and Implement Security Solutions Design and deploy security measures to protect the platform from threats and vulnerabilities Conduct Risk Assessments Perform regular risk assessments and vulnerability analyses to identify and mitigate potential security risks Incident Response Lead incident response efforts including investigation containment and remediation of security breaches Collaborate with Teams Work closely with development operations and IT teams to integrate security best practices throughout the development lifecycle Monitor Security Tools Implement and manage security tools such as firewalls intrusion detection systems and encryption technologies Security Audits and Penetration Testing Conduct regular security audits and penetration tests to ensure the robustness of the platform Educate and Raise Awareness Educate team members on security best practices and raise awareness about cybersecurity across the organization Stay Updated Keep abreast of the latest security trends tools and technologies to continuously improve the organizations security posture Experience Several years of professional experience in security engineering ideally within a platform engineering context Certifications Relevant certifications such as CISSP CompTIA Security or similar Technical Expertise Proficiency in security protocols threat modeling and incident response Tools and Technologies Experience with security tools like firewalls intrusion detection systems and encryption technologies Experience in application security tools like Blackduck Coverity IriusRisk Wizio etc Problem Solving Strong analytical and problem solving skills Communication Excellent communication and collaboration skills Experience with Cloud Security Knowledge of cloud security best practices and experience with cloud platforms

Posted 2 weeks ago

Apply

6.0 - 11.0 years

30 - 35 Lacs

noida, chennai

Work from Office

HCL Tech uses Qualys tools for various roles, including those in security, infrastructure management, and penetration testing. Job descriptions often specify experience with Qualys tools, such as vulnerability scanning and configuration management , and may also require proficiency in other security technologies and certifications like CEH. 1. Security Roles: Vulnerability Assessment and Penetration Testing (VAPT): HCL Tech uses Qualys tools for identifying vulnerabilities in systems and applications. VAPT Testers need experience with Qualys and other penetration testing tools. Security Operations Engineer: This role involves implementing and managing security measures, including those related to vulnerability management and cloud security posture management (CSPM) using Qualys. Tools/Qualys: This role involves administering and operating Qualys, potentially alongside other PKI solutions like ADCS or AppViewX. 2. Infrastructure Management: Administration and Operations of PKI: Qualys is sometimes used in conjunction with PKI solutions to manage certificates and related configurations, including CSR creation, certificate push, and secure connections. 3. General Requirements: Security Domain Experience: Many roles require experience in managing security infrastructure, including vulnerability management and configuration management, where Qualys is often utilized. In summary, HCL Tech utilizes Qualys tools for various security-related tasks, including vulnerability assessment, infrastructure management, and cloud security posture management. Specific requirements vary depending on the role, but experience with Qualys is often a valuable asset

Posted 2 weeks ago

Apply

4.0 - 8.0 years

20 - 25 Lacs

bengaluru

Work from Office

This Position reports to: BU Digital Leader Your role and responsibilities: In this role, you will have the opportunity to define and implement ABBs cybersecurity strategy aligned with the overall strategy and business needs. Each day, you will manage cybersecurity risks that could affect the ABB brand and customer base for all ABB offerings, in a cost-effective way. You will also showcase your expertise by collaborating with businesses to protect and grow revenue by effectively addressing customer cybersecurity expectations and actively driving cybersecurity opportunities and demand. The work model for the role is: #LI-Onsite This role is contributing to the Motion Business in Service division in Bangalore, India. You will be mainly accountable for: Be accountable for identifying, reporting, and mitigating cybersecurity risks within the division, including impact assessments on financial, safety, and operational aspects. Support and influence the execution of ABBs cybersecurity strategy within the Motion Services division, aligning with group-level initiatives and standards. Represent the division in the Group Cybersecurity Council, contributing to the development of global cybersecurity policies, standards, and guidelines. Provide cybersecurity requirements for offerings, conducts threat modeling and assessments, and ensures compliance with relevant regulations and certifications. Act as a cybersecurity expert for customers, guides product managers, and drives internal awareness through training and assessments. Maintain awareness of emerging cybersecurity trends and technologies, ensuring the division stays ahead of evolving threats and market expectations. Qualifications for the role: B.E., B.Sc. or M.Sc. in Cybersecurity, computer science, communications and information technology, mathematics or a related field Excellent interpersonal communication skills in English Strong command and several years experience in IT Cybersecurity operational topics for cloud-based systems In-depth knowledge of existing and evolving regulations and security standards for IoT based offering or industrial offering in general Independent, cooperative and emphatic with colleagues, first leadership experience Knowledge of tools and processes around SecDevOps, standards like CRA, NIS-2, IEC62443 and SOC-2 Knowledge of threat modeling, security monitoring tools, application of cryptography, Cybersecurity testing and forensics is a plus

Posted 2 weeks ago

Apply

1.0 - 2.0 years

3 - 3 Lacs

ahmedabad

Work from Office

Responsibilities: * Conduct penetration tests on web apps, networks & mobile devices using Burp Suite, Nessus & Vapt. * Identify vulnerabilities through API testing & cloud security assessments with accuracy. Annual bonus

Posted 2 weeks ago

Apply

4.0 - 7.0 years

4 - 6 Lacs

mumbai, thane, navi mumbai

Work from Office

Job Role - Linux Admin L2 Experience - 5+ years Job Location - Thane Immediate to 15 days Job Type - Permanent Work from Office Roles - 3-4 years of experience in Linux Administration Experience in VAPT Basic understanding in writing Shell Scripts 24*7 shift

Posted 2 weeks ago

Apply

6.0 - 10.0 years

8 - 12 Lacs

telangana

Work from Office

Apenetration testing (PenTest) and disaster recovery (DR) test job description typically requires candidates to have expertise in both cybersecurity and business continuity. The role involves conducting authorized simulated attacks to identify vulnerabilities in systems and infrastructure, developing and testing DR plans, and providing recommendations for improvement. Penetration Testing (PenTest) Responsibilities : Vulnerability Assessment: Identify weaknesses in computer systems, networks, and applications. Simulated Attacks: Perform ethical hacking exercises to mimic real-world attacks. Reporting and Recommendations: Document findings and provide actionable recommendations for remediation. Staying Updated: Keep abreast of the latest cybersecurity threats and trends. Disaster Recovery (DR) Testing Responsibilities: DR Plan Development: Contribute to the development and maintenance of DR plans. Testing and Validation: Conduct DR tests to validate the effectiveness of the plan and identify gaps. Communication: Communicate with stakeholders regarding DR testing procedures and results. Improvement: Suggest improvements to the DR plan based on testing findings. Key Skills and Requirements : Technical Expertise: Strong understanding of operating systems, networking, and programming languages. Security Knowledge: Familiarity with cybersecurity best practices, threat models, and security tools. Communication Skills: Ability to communicate findings and recommendations to both technical and non-technical audiences. Analytical Skills: Ability to analyze root, identify trends, and develop solutions. Problem-solving Skills: Ability to troubleshoot issues and implement fixes. Additional Information: Certifications: Relevant certifications like CompTIA PenTest+, CEH, or CISSP can be beneficial. Experience : Experience in cybersecurity,penetration testing, and/or disaster recovery is usually required

Posted 2 weeks ago

Apply

5.0 - 8.0 years

5 - 9 Lacs

hyderabad

Work from Office

This role will play a critical role in enhancing our Web Application Firewall (WAF) across multiple solutions and applications and will be pivotal in crafting, testing, and implementing advanced WAF solutions. The ideal candidate will have previously worked with the Akamai platform, although working with at least two major WAF vendors such as F5, AWS, GCP, is also key The successful candidate will monitor and review tuning requests, proactively assist with identifying false positives and provide expert recommendations to ensure optimal protection and performance. This will require staying up to date with the latest web security threats and platform enhancements. Key Accountabilities Ensuring alignment with capability lead and control owner to deliver consistent WAAP policies across multiple infrastructures. Ensuring timely and accurate review and action on all WAF tuning requests. Conducting thorough log analyses to effectively identify and mitigate false positives, ensuring optimized WAF rules. Maintaining comprehensive and up-to-date documentation for all WAF tuning procedures, policies, and configurations. Developing and recommending tailored WAF policies and rules for various applications and environments. Proactively identifying and addressing false positives to enhance overall WAF accuracy. Collaborating effectively with cross-functional teams to integrate WAF solutions seamlessly into existing security infrastructure. Collaborating effectively with application teams to enable WAF protection across HSBC. Ensuring connectivity to origin servers on premise only comes through Akamai to prevent direct to origin attacks. Providing expert recommendations for WAF configurations based on best practices and current security requirements. Ideal Candidate Profile Extensive experience in WAF management, tuning, and engineering, with a strong understanding of web application security principles. Proven track record of proactively identifying and mitigating false positives to optimize WAF performance. Mandatory Skills: Web App Firewall F5 BIG-IP ASM.Experience: 5-8 Years.

Posted 2 weeks ago

Apply

3.0 - 5.0 years

5 - 9 Lacs

bengaluru

Work from Office

Mandatory Skills: Vulnerability Scanning.Experience: 3-5 Years. We are looking for a skilled Technical Support professional with 3-5 years of experience to join our team as an Analyst - L3. The ideal candidate will have a strong background in technical support and excellent problem-solving skills. Roles and Responsibility Provide technical support to customers via phone, email, or chat. Troubleshoot and resolve complex technical issues efficiently. Collaborate with internal teams to resolve customer complaints and concerns. Develop and maintain technical documentation and knowledge base articles. Analyze and report on customer feedback and suggest process improvements. Participate in training and development programs to enhance technical skills. Job Requirements Strong technical skills and knowledge of IT services and consulting. Excellent communication and problem-solving skills. Ability to work in a fast-paced environment and meet deadlines. Strong analytical and troubleshooting skills. Experience with technical support tools and software. Ability to collaborate effectively with cross-functional teams. Mandatory skills include technical support and title analyst.

Posted 2 weeks ago

Apply

8.0 - 12.0 years

5 - 10 Lacs

pune

Hybrid

So, what’s t he r ole all about? As a member of the Cloud Security team, a successful Cloud Security Analyst will need to be self-sufficient to collaborate effectively with multiple teams, such as Application Support, Infrastructure Operations, DevOps, Product R&D, Security teams, customers and 3 rd party auditors. This role will hold the responsibility of understanding the Cloud security policies, procedures, practices and technologies and documenting them appropriately as well as demonstrating to auditors and customers the excellent Cloud Security at NiCE. A successful candidate in this role will be able to work in production cloud environments to collect and curate evidence and explain it to anyone who asks for it. Experience with Governance, Risk and Compliance (GRC) is a big plus! How will you make an impact? You will directly impact the success of the NiCE cloud business by ensuring all customer and auditory security requirements are met and demonstrated. A diverse, merit-driven work environment which rewards a growth mindset and encourages innovation and continued professional development; The opportunity to work in a global, highly skilled, passionate workforce to deliver world-class service and products to market. Competitive pay and excellent benefits. Generous PTO policies. A highly focused security & compliance team which is collaborative, supportive, experienced, and driven to help everyone from the individual to enterprise to our customers realize the success for which they aim. Have you got what it takes? 8+ years of experience with Information Security & Compliance or GRC University-level degree in InfoSec, Computer Science or other related field. knowledge with major compliance frameworks such as PCI, ISO 27001/17, SOC 2, HITRUST, GDPR. A burning curiosity to learn as much as you can about the NiCE cloud environment and the services and products we offer our customers as well as the existing security infrastructure we have in place today; Excellent communications skills along to work collaboratively with security team members and operations and development teams or independently to achieve tactical and strategic security goals; Strong organization and prioritization skills; Education, training or experience with security and compliance fundamentals; Experience working with work tracking tools such as JIRA, Service Now or others. What’s in it for you? Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NiCE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NiCEr! Enjoy NiCE-FLEX! At NiCE, we work according to the NiCE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere. Requisition ID: 8240 Reporting into: Technical Manager Role Type: Individual Contributor

Posted 2 weeks ago

Apply

3.0 - 8.0 years

5 - 15 Lacs

dubai, chennai, bengaluru

Work from Office

PN: who are relevant & interested candidates can come for F2F interviews on Wednesday,20th Aug 25 btw 10:30am to 6:00pm, Venue details: Happiest Minds- SMILES 1,3rd & 4th Floor, SJR Equinox,Sy.No.47/8,Doddathogur Village,Begur Hobli,E- City Phase1,Hosur Road, Opposite to Velankani tech park,B-560100. . POC:-Sreenivas Please find below the JD for your reference, experience conducting Application Security assessments Experienced in conducting Manual and Automated DAST for Web, API & Thick client covering OWASP Top 10 Experienced in conducting Manual code review Experienced in Mobile VAPT (Both static and Dynamic) Knowledge of Infra VAPT or at least VA and configuration review Knowledge in Container / Docker security / Cloud Audit is a plus Certifications suck as CEH, CRTP, OSCP is preferred Good communication skills, ability to explain vulnerabilities to business users in simple terms.

Posted 2 weeks ago

Apply

4.0 - 9.0 years

8 - 12 Lacs

udaipur

Work from Office

Conduct vulnerability assessments and penetration testing on web applications, mobile apps, and network infrastructure. Analyze scan results, identify security gaps, and provide actionable remediation plans. Collaborate with development, network. Required Candidate profile Relevant exp in VAPT, ethical hacking,security testing.Sound knowledge of network protocols, web technologies, operating systems, security best practices. Certified Ethical Hacker (CEH) certification

Posted 2 weeks ago

Apply

4.0 - 6.0 years

1 - 3 Lacs

faridabad

Work from Office

Role & responsibilities Lead and execute VAPT across web, mobile, network, and OT environments Drive the implementation and analysis of SAST, DAST, and SCA tools across SDLC Architect and guide secure development and deployment practices Lead incident response simulations and vulnerability management programs Conduct security assessments and risk management for large-scale systems Support and guide ISO 27001 audits and implementation Should be capable of managing a high-performance team of 810 security analysts/engineers Preferred candidate profile Offensive Security Certified Professional (OSCP) or equivalent hands-on cert Advanced expertise in penetration testing tools and methodologies Strong knowledge of secure architecture , protocols, cloud security, and threat modeling Familiarity with critical infrastructure/OT systems security Experience with SAST/DAST/SCA tools like SonarQube, Burp Suite, Fortify, Veracode, etc. Deep understanding of compliance and frameworks: ISO 27001, SOC 2, OWASP, NIST

Posted 2 weeks ago

Apply

6.0 - 15.0 years

0 Lacs

karnataka

On-site

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world. We are hiring Product Security Architects Medical across PAN India for experienced professionals with 6 to 15 years of experience. Your role will involve evaluating software/product architecture to ensure security is embedded at the design phase, developing cybersecurity artifacts such as threat models, and leading mitigation discussions. You will support engineering teams in triaging and resolving identified product vulnerabilities, coordinate internal and external security and privacy assessments including VAPT, and assist in formulating and implementing product security and privacy policies, standards, and procedures. In addition, you will ensure compliance with defined security and privacy requirements, verify the effectiveness of protection measures, guide the resolution of security audit findings, and ensure timely closure. Providing strategic security risk management and advisory support for product and information security, participating in incident response, and assessing the risk and impact of security breaches will also be part of your responsibilities. You will review engineering changes, new services, and feature requests for security implications and collaborate with tech leads and architects to ensure secure product development. Your profile should include strong experience in application, mobile, network, OS, and cloud security, proficiency in AWS security including AWS Solution Architect Associate and Security Specialty certifications, hands-on expertise in static/dynamic code analysis, container security, and Kubernetes. Familiarity with security frameworks and standards like NIST 800-53, CIS/STIG, HI-TRUST, and SOC2 is required, along with knowledge of cryptography, PKI, OAUTH, 2FA, and secure software development lifecycle (SDLC). Joining Capgemini will offer you the opportunity to shape cutting-edge projects in tech and engineering with industry leaders.,

Posted 3 weeks ago

Apply

5.0 - 10.0 years

0 Lacs

noida, uttar pradesh

On-site

You will be playing a crucial role in supporting the activation of the Cyber Security Strategy at inMorphis. Your responsibilities will include leading various initiatives, engaging with partners, supporting the governance of the Cyber Practice, and contributing to strategic projects and analysis. Additionally, you will be leading cyber engagements with clients, ensuring high-quality deliverables, and developing the market for Cyber Security services across all sectors. Your role will involve establishing client relationships with senior stakeholders, planning the delivery phase of engagements, creating proposals and marketing material, and managing engagements within specified time and budget constraints. You will also mentor and coach junior team members, contribute to the development of the existing cyber risk team, and lead by example. To excel in this role, you should have a detailed understanding of our business economics, financial levers, and the decision-making processes of senior leaders. You should be adept at managing businesses in high-growth phases, driving business transformation initiatives, and have a broad background in security. Specific experience in essential Cyber Security domains such as security strategy, assessment, designing and implementing security frameworks, and security transformation programs is required. Experience with ServiceNow SecOps is essential for implementing security policies, procedures, and controls in alignment with regulations and standards. Knowledge of data privacy, agile development environments, networking fundamentals, common security attacks, and reporting requirements such as NIST, SOC2, VAPT, and ISO is crucial. A minimum of 5-10 years" experience in Security with a background in SOC and operations is necessary to succeed in this role.,

Posted 3 weeks ago

Apply

5.0 - 9.0 years

0 Lacs

kolkata, west bengal

On-site

Genpact is a global professional services and solutions firm dedicated to shaping the future through the relentless pursuit of a world that works better for people. We are driven by innate curiosity, entrepreneurial agility, and the desire to create lasting value for our clients, including leading enterprises like the Fortune Global 500. With over 125,000 employees in 30+ countries, we serve and transform businesses with our deep industry knowledge, digital operations services, and expertise in data, technology, and AI. We are currently seeking applications for the position of Lead Consultant - Quality Analyst SFDC (Automation). As a Lead Consultant, your responsibilities will include creating, maintaining, and executing Automation & Manual test plans, scripts, and Regression testing. You should have proficiency in using tools such as Cucumber, Selenium WebDriver, LoadRunner, or equivalent test suits. Experience in testing on the Salesforce platform, writing Java scripts, automation scripts, and familiarity with Postman for API testing is essential. Strong skills in creating efficient reports, implementing effective logging mechanisms, and executing VAPT (Vulnerability Assessment and Penetration Testing) are required. Additionally, you should be able to work independently and with peers, collect, review, and validate test data, report and track defects to closure, and contribute to continual improvements. Qualifications we seek in you include a BS/BE/B.Tech/MCA or equivalent degree, experience in Automation & Functional Testing, and proficiency in Automation using Selenium WebDriver, TestNG, jUnit. Experience in Salesforce testing or testing other SaaS applications, Integration Testing between ERP and salesforce application, understanding of Waterfall and Scrum Agile methodologies, good business analysis skills, database experience with SQL queries, knowledge of performance tools like JMeter/LoadRunner, and coding enterprise applications within Java, PHP, and other languages. Preferred qualifications/skills include desired experience in web services testing and QA certification. This position is based in India-Kolkata and is a full-time role requiring a Bachelor's degree or equivalent. The job posting date is Jun 4, 2025, and the unposting date is Dec 1, 2025. The primary skills required for this role are Digital, and it falls under the category of Full Time jobs.,

Posted 3 weeks ago

Apply

2.0 - 6.0 years

0 Lacs

haryana

On-site

As a Junior Cybersecurity Engineer at Appzlogic, you will be responsible for leveraging your expertise in cybersecurity to protect our systems and data. With 2-5 years of experience in the field, you will operate at a mid-level capacity, conducting Penetration Testing, SAST, VAPT, and Ethical Hacking to identify and address vulnerabilities. Your proficiency in Networking Security, Cloud Security, Security Frameworks, Threat Modeling, and API Testing will be crucial in safeguarding our organization against cyber threats. In this full-time, permanent role based in Gurugram, you will be expected to work in person at our office. We are looking for candidates who can join immediately or within 15-20 days. Your experience of at least 3 years in Cybersecurity, particularly in Gurugram, Haryana, will be highly valued. Additionally, you will be required to provide information on your notice period. As part of our team, you will enjoy benefits including health insurance and Provident Fund. If you are passionate about cybersecurity and eager to contribute to a dynamic team, we look forward to receiving your application.,

Posted 3 weeks ago

Apply

2.0 - 6.0 years

0 Lacs

udaipur, rajasthan

On-site

You will be working as a part of the IS department, requiring 2 to 5 years of experience, on a full-time basis with the flexibility to work from anywhere. Your primary responsibilities will include conducting vulnerability assessments and penetration testing on various platforms such as web applications, mobile apps, and network infrastructure. You will be expected to analyze scan results, identify security gaps, and develop actionable remediation plans. Collaboration with development, network, and infrastructure teams will be essential to validate and verify fixes. To excel in this role, you must possess a Bachelor's degree in Computer Science, Information Security, or a related field. Additionally, you should have at least 2 years of relevant experience in VAPT, ethical hacking, or security testing. Proficiency in network protocols, web technologies, operating systems, and security best practices is crucial. Holding certifications like Certified Ethical Hacker (CEH) will be advantageous. You will be responsible for keeping VAPT tools and scripts up to date to ensure effective testing. Detailed reporting following industry standards such as OWASP and CVSS will also be part of your duties. Staying informed about the latest vulnerabilities, threats, attack vectors, and security trends is imperative for this role. Moreover, compliance with internal security policies and external regulatory requirements like ISO 27001 and PCI-DSS will be expected from you. Your involvement in red teaming/ethical hacking initiatives and providing support during security audits, both internal and external, will be required. Additionally, you will play a role in enhancing standard operating procedures (SOPs), testing methodologies, and reporting templates. Overall, your role will be critical in maintaining the security posture of the organization by conducting thorough security testing, identifying vulnerabilities, and recommending appropriate remediation measures.,

Posted 3 weeks ago

Apply

0.0 - 4.0 years

0 - 0 Lacs

delhi

On-site

About the internship: As an intern at Innobuzz Learning Solutions, your primary responsibilities will include conducting security assessments of web apps, mobile apps, and APIs. You will be required to research the latest cybersecurity trends and collaborate with the team to create cybersecurity user awareness sessions on social media. Additionally, you will assist senior cybersecurity professionals in Vulnerability Assessment and Penetration Testing (VAPT) projects, which involves performing vulnerability management and reporting. It will also be your responsibility to develop and maintain detailed documentation of security assessments, findings, and remediation efforts. Keeping yourself updated with the latest cybersecurity threats, vulnerabilities, and best practices is crucial. Furthermore, you will research critical Common Vulnerabilities and Exposures (CVEs) and develop Proofs of Concept (POCs) for the assessment teams. Who can apply: This internship is open to candidates who are available for a full-time, in-office commitment for a duration of 6 months. Applicants should possess relevant skills and interests in cybersecurity. Stipend: INR 10,000-20,000 per month Other perks: In addition to the stipend, interns will receive a certificate, letter of recommendation, and opportunities for industry visits. Location: NSP, Pitampura, Delhi About Company: Innobuzz Learning Solutions has been a leader in providing top skills in Ethical Hacking, Cybersecurity, CISE, ADIS, CEH, and CompTIA certifications for over 20 years. The expert-led courses in Delhi & NCR are designed to equip individuals with the necessary knowledge to protect against evolving cyber threats. The company also offers cybersecurity services, such as threat analysis, penetration testing, security audits, and vulnerability assessments, to assist businesses in maintaining their security in a digital world. Job Type: Internship Contract length: 6 months Benefits: - Commuter assistance - Flexible schedule - Paid time off - Work from home options Schedule: Day shift Performance bonus Work Location: In person Expected Start Date: 20/01/2025,

Posted 3 weeks ago

Apply
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Featured Companies