296 Vulnerability Jobs - Page 9

Tech Project Manager 10-12 years of working experience as a Full Stack Developer. Experience in managing Development team delivery agile scrum team. Very Strong communication skills, including ability to explain complex information in straightforward situations Perform code review and guide the team out of complex situations. Mentoring the team members. Create project plans and execute and track each deliverables. Report delivery status to project directors for WSR, MSR, QBR etc. Experience with Object Oriented Programming Design, Object-relation Mapping (ORM), NodeJS, React JS, AWS, Next.JS, JavaScript, C# .NET Framework 4.8, , PL/ SQL. Designs, develops, tests, deploys and supports API-based systems focusing on industry best practices. Experience working on User Story development enhancements, Incident Request Management tasks. Good understanding for Agile scrum process Manages individual tasks and timelines under limited supervision. Seeking continuous quality improvements by performing Application Vulnerability remediation for supported systems. Assists in problem analysis and submits recommendations when appropriate. Proficiency in multiple tools of the full stack covering frontend frameworks, databases and deployments Demonstrated ability to quickly learn new technologies Ability to solve moderately complex problems, drawing upon technical experience, precedents, and judgement Primary Support Hours - Hong Kong Timings (6:00 AM IST to 3:00 PM IST). Will be required to support under the 24x7 coverage within the Team roster planning

The Service Line Support Analyst will collaborate closely with the business to understand and communicate their vulnerability hygiene and devise strategic remediation plans through targeted analysis and communication. In this role, the analyst will distil complex security data into actionable insights and communicate these effectively to both technical and non-technical stakeholders. The analyst will play a pivotal role in building the business confidence and collaboration with the Vulnerability Management program by fostering strong partnerships across the organization. Contributions will be instrumental in advancing our security posture and protecting the integrity of our services. Skills and attributes for success Basic understanding of information security and cybersecurity principles. Strong communication skills with the ability to convey technical information in a clear manner. Eagerness to learn and build relationships within the organization. Ability to work in a team environment and support senior team members. A proactive approach to problem-solving and the ability to prioritize tasks. To qualify for the role you must have 4+ years of experience in an information security role, with exposure to vulnerability management Familiarity with security control functionality and threat landscapes A willingness to engage with stakeholders and contribute to a collaborative work environment Basic experience in data analytics and reporting Strong knowledge of identifying and remediating vulnerabilities in an enterprise environment Demonstrated experience assessing and communication risk to all levels within an organization A fundamental understanding of security control functionality Experience working in a collaborative environment

The Analyst will evaluate vulnerabilities and findings, identifying and mitigating risks stemming from misconfigurations, vulnerabilities, and mismanaged assets. The candidate will develop an ability to interpret and respond to third-party risk assessments and discover EY assets creating unnecessary risk to the firm. Additionally, the analyst will maintain awareness of the developing threat landscape to provide recommendations to team leadership on proactive approaches to attack surface management. Skills and attributes for success Expert attention to detail Developing critical thinking ability Interest in creating creative solutions to complex issues Ability to execute direct requests An understanding of diverse environments Professional-level communication and rapport building skills Developing research methodologies To qualify for the role you must have Bachelor s degree in Information Security related field or A minimum of 1 years of experience in vulnerability management, red team, or purple team or Basic understanding of cloud services, network security, and data protection principles Working knowledge of offensive security principles Developing analytical and problem-solving skills Strong communication and interpersonal skills Ability to evaluate and prioritize competing priorities from varying stakeholders Ideally, you ll also have OWASP training Incident response experience

The Exposure Assessment Lead within Vulnerability Management will spearhead the evaluation and management of the firms digital exposure, identifying and mitigating risks stemming from misconfigurations, vulnerabilities, and mismanaged assets. The candidate will play a crucial role in managing third-party risk assessments and identifying assets failing to meet stringent EY security standards. Collaborating closely with various departments, the lead will enhance digital risk management practices and develop comprehensive strategies to protect EYs digital assets. Additionally, you will monitor emerging threats in the digital landscape, advising on proactive measures to safeguard the firm against potential security breaches. Skills and attributes for success Strong written communication skills Analytical background Strategic planning experience Demonstrated ability to distil complex, technical data into clear, concise explanations Interest in developing creative solutions to complex issues Ability to handle high volume requests Collaborative mindset Efficient research methodologies To qualify for the role you must have A minimum of 8 years of experience in vulnerability management, red team, or purple team Strong understanding of cloud services, network security, and data protection principles Expert knowledge of offensive security principles Experience in automating vulnerability discovery An understanding and clear ability to develop performance metrics and risk-based assessment of digital exposure Excellent analytical and problem-solving skills, with the ability to translate complex technical issues into clear business impacts Demonstrated experience in managing third-party risk assessments and vendor relationships Exceptional communication and interpersonal skills Experience developing team and program performance metrics Leadership experience with the ability to manage and develop a high-performing team Ability to evaluate and prioritize competing priorities from varying stakeholders Ideally, you ll also have OWASP training Incident response experience

We are seeking a highly skilled Defender Endpoint Security Specialist with 5-10 years of solid implementation and operational experience. The ideal candidate will be responsible for ensuring the security of our endpoints and will be ready to work during shift hours and weekends. Key Responsibilities: Implement and manage Microsoft Defender for Endpoint solutions. Monitor and respond to security incidents and alerts. Conduct regular security assessments and vulnerability scans. Develop and maintain security policies and procedures. Collaborate with IT and other departments to ensure comprehensive endpoint security. Provide training and support to staff on security best practices. Stay updated with the latest security trends and threats. Qualifications: Bachelors degree in Computer Science, Information Technology, or a related field. 5-10 years of experience in endpoint security, specifically with Microsoft Defender. Microsoft Defender certification (SC200). Strong knowledge of security frameworks and best practices. Experience with security incident response and management. Excellent problem-solving and analytical skills. Ability to work independently and as part of a team. Willingness to work offpeak hours and weekends. Preferred Skills: Certifications such as SC500, CISSP, CISM, or similar. Experience with other security tools and technologies. Ms Defender, Cyber Security

About this opportunity: We are seeking an experienced SOC Analyst to support and enhance our security operations, ensuring the protection of our systems and data. The role requires strong analytical skills, attention to detail, and the ability to respond swiftly to security incidents. You will work in a 24x7 SOC environment and be responsible for monitoring, analysing, and managing security events and incidents, along with conducting regular vulnerability assessments to identify and mitigate potential security risks. What you will do: Strong knowledge of user access and password management best practices. Familiarity with log management, SIEM, and security monitoring tools. Expertise in system hardening and secure communication protocols. Knowledge of compliance frameworks and security standards. Schedule and perform regular vulnerability assessments. Track and document vulnerability scan results based on agreed timelines. Ensure access management complies with security standards and policies. Ensure secure SNMPv3 integration and compliance with communication matrix guidelines. Ensure secure transfer of logs to SIEM/SOC and A-log server for DoT compliance. Configure logging for authentication, password resets, and system events. Prepare daily, weekly, and monthly security reports. Provide insights and recommendations to improve security posture. Monitor SOC ticket and email queues for event reporting from external entities and internal users. Proficient in managing both internal and external customer relationships to ensure exceptional service delivery. Acute listening skills combined with a sharp problem-solving acumen enable quick and effective resolution of issues. The skills you bring: Bachelor of Engineering and 2 to 4 years of experience in a large enterprise or telecom environment. Strong experience in SOC operations, incident handling, and security compliance. Willingness to work in a 24x7 operational environment with rotating shifts, including weekends and holidays, to support critical infra and ensure minimal downtime. Hands-on experience with Linux, Windows, and cloud environments (OpenStack, GCP). Working knowledge of ITIL processes and standards. Primary country and city: India (IN) || Noida Req ID: 764320

Visa is seeking a Controls Monitoring & Testing Analyst within its Technology Risk Management program to review and assess Cybersecurity and Technology risks. The candidate will perform Risk Assessments, Design Effectiveness Assessments, and Operational Effectiveness Testing for key technology threat vectors such as security configuration management, firewall configuration, application, user access management, and availability & reliability. Responsibilities include managing stakeholder engagement plans, participating in process walkthroughs, tracking/reporting deliverables, and producing high-quality work papers for all lines of defense and risk stakeholders. Additionally, the candidate will interpret data from source systems to perform statistical sampling and aggregate assessment across various risk management levers, collaborate with technology partners, and distill information into management and executive-level reporting. Key Responsibilities: Technology & Cybersecurity Controls Testing: Perform independent technology and cybersecurity controls testing. Document testing results in detailed workpapers. Prepare management reports based on testing outcomes. Communicate findings with stakeholders. Automation for Continuous Monitoring: Develop automation for continuous controls monitoring/auditing for technology and cybersecurity. Monitor the results of automated controls, perform investigation and follow-ups as needed. Risk & Control Self-Assessment (RCSA): Execute RCSA Risk Business Partner (RBP) controls quality review and sample-based testing. Conduct Key Risk Indicator (KRI) testing. Training, Metrics Alignment & Reporting: Develop and track risk management training. Align metrics with reporting dashboards. Develop reporting and stakeholder communication. This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager. Basic Qualification 3 years of relevant work experience and a Bachelors degree Preferred Qualification Bachelor s degree with 5 years of work experience in cyber, risk controls, or equivalent. Experience with technology and cyber processes and functions (e.g., Vulnerability, Availability & Reliability Risk, Cyber Defense, Third Party Technology Risk, Identity Access Management, Security Architecture, etc.). Experience auditing technology and cybersecurity processes, risks, and controls. Experience developing automation for continuous controls monitoring/auditing for both technology and cybersecurity. Ability to prioritize deliverables and projects efficiently and adapt to changing priorities quickly. Strong analytical and problem-solving skills. Effective communication skills, both formal and informal. Ability to facilitate group discussions and debates across geographic and functional lines. Experience in regulated industries and payment platforms preferred. CISA, CISM, CISSP certification preferred.

We are looking for an automation test engineer to define test strategy, develop test automation, perform manual and automated testing, and ensure the overall quality of a SaaS platform. The ideal candidate will bring strong development skills, a passion for testing, and experience with SaaS applications to deliver a seamless and high-quality user experience. Key Responsibilities: Provision, configure, and monitor Azure resources with best practices for cost, performance, and security. Implement Infrastructure as Code using Terraform to ensure consistency and reproducibility across environments. Develop and maintain CI/CD pipelines for automated testing, code deployment, and rollbacks. Integrate containerized applications (Docker) into pipelines and manage artifact repositories. Deploy and manage Kubernetes clusters (AKS/EKS) for container orchestration, including scaling, service mesh, and Helm chart deployments. Troubleshoot cluster performance, networking, and storage issues. Optimize system performance and automate routine tasks using Bash/Python. Conduct vulnerability scans and enforce identity/access management (IAM) policies. Collaborate closely with cross-functional teams to ensure requirements are met and high-quality software is delivered on time. Skill Requirements: 8+ years of hands-on experience in DevOps/Cloud Engineering. Proficiency in Azure services, Terraform, Docker, Kubernetes, CI/CD tools, Linux system administration, and scripting (Bash/Python). Familiarity with monitoring tools (Prometheus, Grafana, Azure Monitor) Strong understanding of Agile methodologies (Scrum, Kanban). Strong knowledge of cloud platforms (Azure, others) and SaaS-based product architectures. Strong analytical and troubleshooting skills with the ability to identify, prioritize, and resolve issues effectively. Must have excellent communication skills, with the ability to clearly articulate test results, issues, and improvements to both technical and non-technical stakeholders. Detail-oriented with a commitment to delivering quality results with the ability to work independently and manage competing priorities effectively.

you're at the forefront of delivering secure software solutions. Join us a valued member of a top-performing team. As a Security Engineer II at JPMorgan Chase within the Cybersecurity & Tech Control team, you are part of an agile team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behavior. As an emerging member of the security engineering team, you execute basic software solutions through the design, development, and troubleshooting of multiple components within a technical area, while gaining skills and experience to grow within your role. Job responsibilities Executes standard security solutions in accordance with existing playbooks to satisfy security requirements for internal clients (eg, product, platform, and application owners) Writes secure and high-quality code using Java programming language with limited guidance Applies specialized tools (eg, vulnerability scanner) to analyze and correlate incident data to identify, interpret, and summarize probability and impact of threats when determining specific vulnerabilities Supports delivery of continuity-related awareness, training, educational activities, and exercises Adds to team culture of diversity, equity, inclusion, and respect Required qualifications, capabilities, and skills Formal training or certification on software engineering concepts and 2+ years applied experience Hands-on experience in system design, application development, testing, and maintaining operational stability. Proficient in coding with Java using Spring Boot, with experience in a large corporate environment. Familiarity with modern front-end technologies - React JS Experience across the entire Software Development Life Cycle, including developing, debugging, and maintaining code with modern programming and database querying languages. Exposure to agile methodologies, such as CI/CD, application resiliency, and security. Emerging knowledge of software applications and technical processes within disciplines like cloud, artificial intelligence, machine learning

CI/CD Pipeline Management: Design, implement, and manage CI/CD pipelines using GitLab CI to streamline development workflows and facilitate continuous delivery of applications. Containerization Orchestration: Use Kubernetes for deploying, scaling, and managing containerized applications in a cloud environment. Infrastructure Automation: Automate infrastructure provisioning and management using Infrastructure as Code (IaC) tools like Terraform or Ansible . Monitoring Logging: Set up and manage logging, monitoring, and ing solutions for cloud infrastructure and applications, leveraging tools like Prometheus , Grafana , and ELK stack . Cloud Management: Manage cloud infrastructure (e.g., AWS, Azure, or Google Cloud), ensuring scalability, reliability, and cost optimization. Security: Implement best practices for secure application deployment and infrastructure, including identity and access management (IAM), container security, and vulnerability scanning. Collaboration Support: Work closely with development teams to improve deployment pipelines, troubleshoot issues, and ensure seamless integration of new features. 6+ years of experience in DevOps, Cloud Engineering, or related field. Proficiency with GitLab CI/CD pipelines, GitLab Runner, and GitLab repositories. Strong hands-on experience with Kubernetes and Docker for container orchestration and deployment. Solid knowledge of Infrastructure as Code (IaC) tools such as Terraform , Ansible , or CloudFormation . Experience working with cloud platforms such as AWS , Azure , or Google Cloud . Familiarity with configuration management tools like Chef , Puppet , or Ansible . Proficient in scripting languages such as Bash , Python , or Groovy . Hands-on experience with monitoring, ing, and logging systems (e.g., Prometheus , Grafana , ELK stack ). Strong understanding of Networking , Load Balancers , and DNS management. Experience with version control systems, primarily Git . Strong troubleshooting and problem-solving skills. Excellent communication and collaboration skills with both technical and non-technical teams.

WHO ARE WE We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy! CloudSEK , one of India s most trusted Cyber security product companies, is on a mission to build the world s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention. Founded in 2015, headquartered at Singapore, we are proud to say that we ve grown at a frenetic pace and have been able to achieve some accolades along the way, including: CloudSEK s Product Suite: CloudSEK XVigil constantly maps a customer s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support. A powerful Attack Surface Monitoring tool that gives visibility and intelligence on customers attack surfaces. CloudSEKs BeVigil uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known and unknown assets. CloudSEK s Contextual AI SVigil identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies. Key Milestones: 2016 : Launched our first product. 2018 : Secured Pre-series A funding. 2019 : Expanded operations to India, Southeast Asia, and the Americas. 2020 : Won the NASSCOM-DSCI Excellence Award for Security Product Company of the Year. 2021 : Raised $7M in Series A funding led by MassMutual Ventures, with total investment in to $10M Awards Recognition : Won NetApp Excellerators "Best Growth Strategy Award," CloudSEK XVigil joined NVIDIA Inception Program, and won the NASSCOM Emerge 50 Cybersecurity Award. About the Role We are seeking a Threat Researcher Lead, a player - coach to spearhead our threat intelligence initiatives, driving strategic and operational excellence in identifying, analyzing, and mitigating cyber threats. This role combines technical expertise with business acumen to enhance our security posture and contribute directly to organizational growth. The ideal candidate will have a proven track record in leading threat intelligence teams, designing proactive defense strategies, and collaborating cross-functionally to align security efforts with business objectives. Key Responsibilities Technology Leadership: Collaborate with customer success and engineering teams to refine detection mechanisms and automate threat intelligence workflows for client solutions. Own co-development with the Engineering team to build and maintain the Threat Intelligence platform delivering high quality intel in a timely manner to all our customers. Continuously refine threat models, frameworks and processes to address evolving cyber risks. Lead advanced threat hunting and malware analysis to uncover risks relevant to customer environments. Team Leadership and Development: Lead, mentor, and grow a team of cybersecurity researchers and analysts focused on threat intelligence and vulnerability discovery. Establish a vision and strategic direction for the team, ensuring alignment with the broader organizational revenue goals. Provide ongoing training, support, and professional development for team members, fostering an environment of growth and knowledge-sharing. Oversee the day-to-day operations of the team, ensuring effective task prioritization and resource allocation. Establish metrics to measure team impact on threat detection accuracy and response times. Reporting and Incident Support: Produce high-quality, technical reports on research findings, detailing potential vulnerabilities, threat actor activities, and risk levels. Help define security metrics and KPIs that measure the effectiveness of threat research efforts. Assist in incident response by providing in-depth analysis of threats, vulnerabilities, and attack techniques used by adversaries. Lead the development of security advisories and public-facing content regarding threats affecting SaaS products. Customer-Centric Incident Support Serve as a trusted advisor to customers during security incidents, providing actionable threat intelligence to guide their containment, remediation, and recovery efforts. Develop customer-focused incident playbooks and threat briefings to empower clients with proactive defense strategies. Analyze post-incident data to generate tailored reports for customers, highlighting adversary TTPs, lessons learned, and recommendations to strengthen their security posture. Business Growth Customer Success Design and execute a comprehensive threat intelligence strategy aligned with organizations business goals. Translate technical findings into customer-facing threat reports, advisories, and executive briefings that demonstrate value and drive ARR growth. Enable the customer success managers with quality content to help them demonstrate the value to the customer. Collaborate with the sales team on lead generation and prospecting opportunities - Leverage in-house research on emerging threats (e.g., dark web activity, exploit chains) to create customer-centric content (blogs, webinars) that positions the company as a thought leader. Qualifications Skills Experience: 5+ years in threat research/analysis, including 2+ years in leadership roles. Prior experience in SaaS/cybersecurity firms preferred. Technical Expertise: Proficiency in threat intel platforms , OSINT tools, and malware analysis. Deep knowledge of APT groups, ransomware trends, and TTPs. Business Acumen: Demonstrated ability to collaborate with sales teams, drive ARR growth, and improve customer retention. Certifications: CISSP, GIAC (GCTI, GCFA), CEH, or equivalent certifications. Education: Bachelor s/Master s in Computer Science, Cybersecurity, or related fields. Soft Skills: Strong communication, stakeholder management, and strategic thinking. Benefits of Joining CloudSEK We provide an environment where you can develop and enhance your skills while delivering meaningful work that matters. You ll be rewarded a competitive salary as well as a full spectrum of generous perks and incentives which include: Flexible working hours. Food, unlimited snacks and drinks are all available while at office. And, the finest part is yet to come! Every now and then we ensure to unwind and have a good time together, which involves games, fun, and soulful music. Feel free to show off your artistic side here!

About the Role: We are looking for an ICS/OT Cybersecurity Engineer with 6 years of experience in auditing ICS/OT environments and conducting risk and vulnerability assessments. The role involves assisting in the review and development of Industrial Cybersecurity programs, security policies, and plans while providing guidance to enhance clients existing OT security programs. Requirements: Strong understanding of cybersecurity frameworks for ICS/OT environments such as ISA-99/IEC 62443, NIST SP 800-82, CIS etc. Solid understanding of OT network communication protocols for example Ethernet/IP, CIP, Modbus, OPC and industrial networking topologies for example ring, star etc. Demonstrated technical skills to analyze, design, and deploy complex Ethernet/IP architectures and communication technologies. Understanding of MITRE ATTCKS for ICS or NERC CIP frameworks. Interpretation of general cybersecurity frameworks such as ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800-53. Working knowledge of industrial control systems for example DCS, PLCs, SCADA etc. Industry experience in Food and Beverage, Chemical, Pharma, Semiconductor, Water and Wastewater, Refining, Pulp and Paper, Oil/Gas Pipeline, Power Generation, Electrical Transmission and Distribution, Material Handling or Packaging. Must have Networking certifications for example CCNA, CCNP, JNCIP-ENT, etc. Relevant Cybersecurity certification for example CEH, CISA, CISM, CCSP, etc. Certified professional engineer. #LI-BG1 #LI-NH1

Design, deploy, and manage scalable and reliable cloud infrastructure solutions using Google Cloud Platform (GCP). Implement and manage virtual machines, containers, serverless computing, and storage solutions. Optimize cloud resources for cost, performance, and security. Develop and implement DevOps practices, including CI/CD pipelines, infrastructure as code (IaC), and automated deployment processes. Use tools such as Terraform, Ansible, and Kubernetes to automate and manage infrastructure. Monitor and maintain system performance, availability, and security. Work closely with development teams to ensure seamless integration of applications and services with cloud infrastructure. Provide technical guidance and support to team members and stakeholders. Troubleshoot and resolve complex infrastructure and deployment issues. Implement and maintain security best practices, including identity and access management (IAM), data encryption, and network security. Ensure compliance with organizational policies and regulatory requirements. Conduct regular security assessments and vulnerability scans. Set up and manage monitoring, alerting, and logging solutions to track system health and performance. Analyze and optimize system performance and resource utilization. Implement disaster recovery and backup strategies. Create and maintain comprehensive documentation for cloud infrastructure, deployment processes, and best practices. Provide regular reports on infrastructure performance, incidents, and improvements. Document and share knowledge on operational procedures and configurations. Responsibilities include: Design, deploy, and manage scalable and reliable cloud infrastructure solutions using Google Cloud Platform (GCP). Implement and manage virtual machines, containers, serverless computing, and storage solutions. Optimize cloud resources for cost, performance, and security. Develop and implement DevOps practices, including CI/CD pipelines, infrastructure as code (IaC), and automated deployment processes. Use tools such as Terraform, Ansible, and Kubernetes to automate and manage infrastructure. Monitor and maintain system performance, availability, and security. Work closely with development teams to ensure seamless integration of applications and services with cloud infrastructure. Provide technical guidance and support to team members and stakeholders. Troubleshoot and resolve complex infrastructure and deployment issues. Implement and maintain security best practices, including identity and access management (IAM), data encryption, and network security. Ensure compliance with organizational policies and regulatory requirements. Conduct regular security assessments and vulnerability scans. Set up and manage monitoring, alerting, and logging solutions to track system health and performance. Analyze and optimize system performance and resource utilization. Implement disaster recovery and backup strategies. Create and maintain comprehensive documentation for cloud infrastructure, deployment processes, and best practices. Provide regular reports on infrastructure performance, incidents, and improvements. Document and share knowledge on operational procedures and configurations. Certifications : Google Cloud Professional DevOps Engineer or other relevant GCP certifications are highly preferred. Primary Skills : Bachelor s degree in Computer Science, Information Technology, or a related field. Master s degree preferred. Minimum of 7 years of experience in DevOps, cloud infrastructure, or a related field. Extensive experience with Google Cloud Platform (GCP) and its services (e.g., Compute Engine, Kubernetes Engine, BigQuery, Cloud Storage). Proven experience with CI/CD tools (e.g., Jenkins, GitLab CI) and infrastructure automation tools (e.g., Terraform, Ansible).

Information Security Team-SOC Manager Location: NOIDA 2) Education: BE/B. Tech./MCA/MS/M. Tech.3) Responsibilities: a) Creation of supporting SOPs inline to the policy requirementsb) b) Integration of all new devices (on premise and AWS cloud) with SIEM c) Experience in doing threat hunting, red teaming cyber drills. d) Monitoring the status of integration for all devices and supporting teams to ensure nitration in case of any breakage e) Support team for defining SOPs and performing triage f) Ensuring functioning of SIEM tool and the related processes as per the mentioned requirements g) Reporting computer security events, in accordance with established processes and procedures h) Coordinate with System Owners, and others (IDC/NOC/TOPS/ Enterprise IT) as needed to analyze events and drive necessary requirements for closure i) Support ongoing analysis and response of computer security incidents by SOC(Monitoring) Team j) Creation of new use cases/reports as per business requirements. i) Creation of new use-cases as per specific to banking environment ii) Creation of new dashboards in SIEM console as per requirement" iii) SIEM tickets closurek) Drive key security operations responsibility (eg. Secure code review, Configuration review etc.) 4) Experience / Job Competencies / Success Factors : a) 10+ years technical experience working in a SOC or incident response. Experience working with BFSI sector and specially Bank on similar role preferred b) Experience with one or more Security Information and Event Management (SIEM) solutions specially with Dnif c) In-depth understanding of security threats, threat attack methods and the current threat environment d) Experience in security monitoring, Incident Response (IR), security tools configuration and security remediation e) Must have excellent troubleshooting and analytical skills. Must be able to clearly articulate and propose security solutions in business terms. Must be able to multitask in a fast-paced environment. f) Provide Support for audit and compliance requirements within defined timelines g) Must be able to work in a fast-paced environment with tight deadlines and changing priorities h) Understanding of network protocols, network capture/analysis tools such as Wireshark. i) Understanding of Linux and Windows operating systems and OS event logging j) Understanding of working with AWS environment k) Must be comfortable working with different type of security solutions in a diverse IT infrastructure environment like : i) FireEye network APT, Paloalto Firewalls, WAF - F5, HIPS -TrendMicro, PIM- Cyber Arc, Qualys Vulnerability Scanner, TrendMicro Endpoint security suite and APT , Honey Pot-Smokescreenl) Experience in developing production SIEM use casesm) Ability to work non-core hours (swing or night shift) if necessaryn) Security + or CEH, CISSP, SANS Course of Incident Response, Digital Forensics

As an Advanced Cyber Security Engineer II here at Honeywell, you will be accountable for ensuring the security of our products and services. You will work closely with our team to implement and maintain security measures to protect our customers from cyber threats. You will report directly to our Security Engineering Manager and you ll work out of our Orion Campus, Bangalore location on a hybrid work schedule. In this role, you will impact the security of all of our products and services, ensuring the self-assured integrity and availability of our customers products, data, and information. You will work with cross-functional teams to develop and implement security solutions, conduct vulnerability assessments, and respond to security incidents. At Honeywell, our people play a critical role in developing and assisting our employees to help them perform at their best and drive change across the company. Help to build a strong, diverse team by recruiting talent, identifying, and developing successors, driving retention and engagement, and fostering an inclusive culture. KEY RESPONSIBILITIES Develop and implement security measures to protect systems and networks Conduct vulnerability assessments and penetration testing Monitor and respond to security incidents Work with cross-functional teams to ensure security requirements are met Stay up-to-date with the latest cybersecurity trends and technologies YOU MUST HAVE 3+ years of experience in cybersecurity or a related field Bachelors degree or equivalent experience in Software Engineering, Computer Science, or related discipline Familiarity with the following tools with direct experience in several of them: Java / Groovy Python JIRA ScriptRunner Jenkins Ansible / Boto3 DevSecOps Security Requirements Threat Modeling Penetration Testing Tools Public Key Infrastructure Embedded Device Software Engineering Hardware Engineering WE VALUE Strong knowledge of python-based development Experience designing and deploying global technology services Deep understanding of tool automation and integration Strong knowledge of secure software development lifecycle and practices such as threat modeling, security reviews, penetration tests, and security incident response Understanding of security by design principles and architecture level security concepts Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities Excellent communication and leadership skills Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders Technical leadership experience in the software security field Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP Understanding of Agile software development practices

A Lead Network Engineer is a senior-level position responsible for overseeing the design, implementation, and management of an organizations networking infrastructure. This role typically combines both technical expertise and leadership, and it often involves managing a team of network engineers. Key responsibilities of a Lead Network Engineer include: 1. Network Design and Architecture Designing and planning the organizations network infrastructure, including LANs, WANs, and cloud networks. Ensuring the network architecture is scalable, reliable, and secure. Evaluating and selecting networking equipment (routers, switches, firewalls, etc.) based on technical requirements. 2. Network Implementation and Configuration Leading the deployment of new network hardware and software. Configuring routers, switches, firewalls, and other network devices. Ensuring smooth integration of new technologies with the existing infrastructure. 3. Troubleshooting and Support Resolving complex network issues that arise during regular operations. Ensuring minimal network downtime and providing efficient solutions for technical problems. Providing on-call support for network-related issues. 4. Network Security Ensuring that network infrastructure is secure from potential threats. Implementing and maintaining firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and other security measures. Conducting regular security audits and vulnerability assessments. 5. Team Leadership and Mentoring Managing a team of network engineers, assigning tasks, and guiding them in day-to-day operations. Mentoring junior engineers, sharing best practices, and developing their technical skills. Overseeing project timelines and resource allocation for network-related projects. 6. Performance Monitoring and Optimization Monitoring network performance using specialized tools to ensure optimal operation. Identifying bottlenecks and implementing strategies to enhance network performance. Managing bandwidth, latency, and network traffic optimization. 7. Collaboration with Other Departments Working with IT teams, system administrators, security teams, and management to ensure network integration with other systems. Coordinating with vendors and service providers for hardware, software, or service needs. 8. Documentation and Reporting Documenting network configurations, changes, and updates. Generating reports on network performance, usage, and security for upper management or clients. 9. Staying Updated with Emerging Technologies Continuously researching new networking technologies (e.g., SDN, 5G, Wi-Fi 6, etc.) to stay ahead of industry trends. Recommending and implementing innovative solutions to improve network efficiency and security.

Continentals digital capabilities are growing every day. Our global Cloud Services team is at the forefront of this transformation, establishing scalable, secure, and efficient cloud platforms that power our innovative solutions worldwide. We are seeking an experienced Cloud Platform Architect to lead the design, implementation, and governance of our enterprise Azure landing zone. This is your opportunity to shape cloud architecture standards, create secure and compliant infrastructure, and build the foundation that empowers our development teams to deliver solutions efficiently and reliably. Join us to architect the future of Continentals digital landscape in an exciting, collaborative global environment. In this role, you will be responsible for the following tasks: Designing and leading the architectural vision for Continentals Azure cloud landing zone, establishing enterprise-wide guardrails, principles, and patterns that align with Microsofts recommended practices and Azure roadmap Driving strategic cloud platform enhancements in security, compliance, connectivity, and governance while providing technical oversight of the entire Azure landing zone infrastructure Architecting and enforcing cloud security controls across the enterprise, including automated compliance monitoring, vulnerability remediation processes, and integration with existing identity management systems Overseeing the development and implementation of Infrastructure as Code (IaC) solutions for automated provisioning, configuration, and management of Azure cloud landing zone Collaborating with internal stakeholders to provide secure, compliant access to Azure IaaS and PaaS offerings Troubleshooting platform issues and improving service documentation

Job Title: Lead OT Cyber Engineer About Us Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION We believe that diversity of people and perspective gives us a competitive advantage. Role Description: Exp: 10yrs Location - Bangalore Technical Requirement: Key Responsibilities: The OT (Operational Technology) Cybersecurity Engineering and Innovation team is responsible for the strategic and technical direction of OT/IACS (Industrial Automated Control Systems) cybersecurity . OT Cybersecurity Engineers support activities such as secure-by-design, standardized solution and network architectures, and the secure implementation of OT/IACS digital technologies across Lead OT Cyber Engineers are cybersecurity influencers functioning at the Enterprise level, reaching broadly across multiple IT Foundational Platform product lines, select Digital Platforms, and OT/IACS Business Unit. These engineers have a grasp of business breadth, along with technical depth to help stakeholders make quality cybersecurity investment decisions. This role positively impacts global cybersecurity practices, in various operating assets and environments, delivering on the cybersecurity integrated risk management strategy. Required Skills & Qualifications: Contribute to OT/IACS Cybersecurity initiatives, technology projects and security programs for one or more digital platform Contribute to the design and review of secure IACS/OT network architectures and data flows including communication between applications, ports, protocols, and services Contribute to the creation of OT/IACS cybersecurity guardrails and IT engineering standards to ensure OT architectures, solutions and technologies across the enterprise are built using a secure-by-design methodology Utilize industry standards and frameworks (e.g., NIST-800-53/82, IEC-62443, MITRE ATT&CK / D3FEND), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios Participate in OT cybersecurity research projects. Research, test, and/or lead proof-of-concepts for new and emerging OT technologies Lead or participate in cybersecurity assessments (risk, vulnerability) for Business Unit IACS designs/installations and/or emerging technology OT solutions to determine criticality rankings and risk gaps Take an active role in the internal OT Cybersecurity Guild, for knowledge transfer and mentoring, and actively participate, contribute, and present at OT/IACS Cybersecurity forums Some travel (up to 20%) may be required. Required Qualification: Palo Alto - Firewalls and Panorama. Preferred Qualification: 4. Other preferred skills / competencies Experience in utilizing frameworks and standards such as NIST-800-53/82 and IEC-62443 in an IACS environment Experience with Industrial Internet of Things (IIoT), optimization, Big data analytics, OT integration and/or SCADA from the Cloud is preferred. Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified Demonstrated OT Cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems). Experience in performing OT/IACS vulnerability scans, passively and actively with technologies such as Tenable Nessus or NMAP scanning tools. Understanding of threats, vulnerabilities, attack paths and exploits in an OT/IACS environment Experience with selecting, designing, architecting, and deploying security technologies to an OT/IACS environment Ability to influence and motivate teams, and work with a variety of disciplines, cultures, and environments. Demonstrated ability to work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc. Demonstrated ability to provide leadership behaviors across enterprise through rigorous change management and compliance processes, while driving efficiencies. Knowledge of techniques and tools that promote effective analysis and the ability to determine root cause and resolution of problems. Communicates in a clear, concise, understandable manner both orally and in writing.

Job Title: Senior OT Cyber Engineer About Us Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION We believe that diversity of people and perspective gives us a competitive advantage. Role Description: Exp: 5 - 10yrs Location - Bangalore Technical Requirement: Key Responsibilities: The OT (Operational Technology) Cybersecurity Engineering and Innovation team is responsible for the strategic and technical direction of OT/IACS (Industrial Automated Control Systems) cybersecurity . OT Cybersecurity Engineers support activities such as secure-by-design, standardized solution and network architectures, and the secure implementation of OT/IACS digital technologies across Lead OT Cyber Engineers are cybersecurity influencers functioning at the Enterprise level, reaching broadly across multiple IT Foundational Platform product lines, select Digital Platforms, and OT/IACS Business Unit. These engineers have a grasp of business breadth, along with technical depth to help stakeholders make quality cybersecurity investment decisions. This role positively impacts global cybersecurity practices, in various operating assets and environments, delivering on the cybersecurity integrated risk management strategy. Required Skills: Contribute to OT/IACS Cybersecurity initiatives, technology projects and security programs for one or more digital platform Contribute to the design and review of secure IACS/OT network architectures and data flows including communication between applications, ports, protocols, and services Contribute to the creation of OT/IACS cybersecurity guardrails and IT engineering standards to ensure OT architectures, solutions and technologies across the enterprise are built using a secure-by-design methodology Utilize industry standards and frameworks (e.g., NIST-800-53/82, IEC-62443, MITRE ATT&CK / D3FEND), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios Participate in OT cybersecurity research projects. Research, test, and/or lead proof-of-concepts for new and emerging OT technologies Lead or participate in cybersecurity assessments (risk, vulnerability) for Business Unit IACS designs/installations and/or emerging technology OT solutions to determine criticality rankings and risk gaps Take an active role in the internal OT Cybersecurity Guild, for knowledge transfer and mentoring, and actively participate, contribute, and present at OT/IACS Cybersecurity forums Some travel (up to 20%) may be required. Required Qualification: 1. Preferred Required education / degrees Bachelor s degree or master s degree in Information Technology, Computer Science, Engineering, or related STEM field is preferred, but not required. 2. Preferred qualifications / certifications Certifications in Industrial Control Systems Cybersecurity or in IT Cybersecurity are highly preferred (e.g., GISCP, GCIP, CISSP, or other similar certification) Vendor-specific training on Operational Technology, IACS equipment manufacturers and internal network systems are highly preferred. Certifications in SAFe Scaled Agile or related scrum/agile project management framework is desirable. 3. Required work experience Minimum 5 years related work experience in Operational Technology/Industrial Controls Systems Cybersecurity field with increasing levels of responsibility. Hands-On experience with OT/IACS critical infrastructure in energy or similar industries preferred. Preferred Qualification: 4. Other preferred skills / competencies Experience in utilizing frameworks and standards such as NIST-800-53/82 and IEC-62443 in an IACS environment Experience with Industrial Internet of Things (IIoT), optimization, Big data analytics, OT integration and/or SCADA from the Cloud is preferred. Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified Demonstrated OT Cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems). Experience in performing OT/IACS vulnerability scans, passively and actively with technologies such as Tenable Nessus or NMAP scanning tools. Understanding of threats, vulnerabilities, attack paths and exploits in an OT/IACS environment Experience with selecting, designing, architecting, and deploying security technologies to an OT/IACS environment Ability to influence and motivate teams, and work with a variety of disciplines, cultures, and environments. Demonstrated ability to work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc. Demonstrated ability to provide leadership behaviors across enterprise through rigorous change management and compliance processes, while driving efficiencies. Knowledge of techniques and tools that promote effective analysis and the ability to determine root cause and resolution of problems. Communicates in a clear, concise, understandable manner both orally and in writing.

5-7 years of experience in Azure DevOps, AWS DevOps. Have hands on experience in DevOps pipeline, Triggers. 3-4 years of experience in Solutioning with DevOps tools like Ansible, Terraform, TerraTest , Scripts using Yaml, Security scan and Testing, SonarQube and Integration, Security vulnerability tools and assessment. Optional skills: Puppet, Chef Successful implementation of DevOps Environment and tool chain 4 - 6 years in Azure and AWS environment. Experience in DevOps Automation scripts. Knowledge of Cloud Infrastructure (Azure /AWS) and IaaC. Team Management and Development. Managed a team 7 - 10 DevOps engineers for large projects. SME Capability building, Training Plan development and mentor DevOps engineers. Collaboration skills and working across multiple project teams. Conduct interviews for the Practice and do the hiring on need basis. Business development, Artefacts and Case studies. Ability to prepare case studies, Practice Plan and implementation. Proposals: Experience in working with Sales Team, Pre-sales. Presentations and interactions with customers. Campaigns: Working with Marketing team.

Roles & Responsibilities:Container Operations Management: Oversee the daily operations of containerized workloads in private cloud environments. Ensure high availability, scalability, and performance of Kubernetes/OpenShift clusters. Handle incidents, troubleshoot issues, and ensure timely resolution of cluster-related problems. Provide technical support and guidance to teams using container services. Document processes, configurations, and troubleshooting steps for future reference. Cluster Administration: Manage Kubernetes and OpenShift clusters, including upgrades, patches, and configuration. Set up and maintain cluster monitoring, logging, and alerting systems. Implement and enforce security policies for containers and clusters. Conduct vulnerability assessments and apply necessary patches to the containerized environment. Maintain compliance with organizational and industry standards. Automation and Optimization: Automate repetitive tasks related to cluster management using tools like Ansible, Terraform, or scripting languages (e. g. , Python, Bash). Optimize resource utilization within clusters to improve cost efficiency and performance. Required skills: 3 to 5 years of hands-on experience in administering Kubernetes/OpenShift environments. Strong knowledge of Kubernetes architecture, concepts, and tools like kubectl, Helm, and Kustomize. Experience with OpenShift administration, including cluster setup, scaling, and management. Proficiency in Linux system administration, shell scripting, and networking concepts Strong problem-solving and troubleshooting skills in containerized environments, with a solid understanding of security best practices in Kubernetes/OpenShift Experience with private cloud platforms like OpenStack Kubernetes (e. g. , CKA) or OpenShift certifications are considered an advantage

Desired Candidate The ideal candidate is a proactive and detail-oriented professional with strong leadership skills and a passion for cybersecurity. They should have excellent communication abilities to convey technical concepts to diverse audiences and a proven track record of managing teams and fostering a culture of security awareness. Adaptable and ethical, the candidate thrives in dynamic environments and collaborates effectively to address evolving cyber threats while maintaining the highest standards of confidentiality and integrity. Responsibilities: Strategic Planning: Develop, implement, and maintain a comprehensive cybersecurity strategy aligned with organizational goals. Risk Management: Identify, assess, and mitigate potential cybersecurity risks and vulnerabilities across systems, applications, and networks. Incident Response: Lead and coordinate incident response activities, ensuring quick containment, recovery, and root-cause analysis of security breaches. Compliance and Standards: Ensure adherence to relevant regulatory standards (e.g., GDPR, ISO 27001) and internal security policies. Team Collaboration: Lead and mentor the cybersecurity team, fostering skill development and ensuring alignment with security objectives. Stakeholder Communication: Act as a liaison between technical teams and senior management, translating technical risks into business terms. Continuous Improvement: Monitor and evaluate the effectiveness of security measures, and recommend enhancements to maintain a robust security posture. Tool and Technology Management: Oversee the deployment and management of security tools (e.g., SIEM, firewalls, endpoint protection, etc.) to ensure system integrity and confidentiality. Training and Awareness: Develop and conduct security training programs to promote awareness and compliance across the organization. Requirements: Education: Bachelors or Masters degree in Cybersecurity, Information Technology, Computer Science, or a related field. Experience: 6-10 years of experience in cybersecurity roles with progressive leadership responsibilities. Certifications: CISSP (Certified Information Systems Security Professional) [Ongoing is acceptable]. Additional certifications (e.g., CISM, CEH) are a plus. Technical Expertise: Strong understanding of security architecture, protocols, and best practices. Experience with tools like SIEM, IDS/IPS, endpoint security, firewalls, and vulnerability management systems. Knowledge of cloud security (AWS, Azure, GCP) and securing hybrid environments. Soft Skills: Excellent verbal and written communication skills for technical and non-technical audiences. Strong leadership, project management, and team collaboration abilities. Analytical and problem-solving mindset with attention to detail.

As the platform engineer, you will be responsible for developing and implementing a strategic vision for application security within the platform engineering team. This role requires strong focus on integrating security practices into DevOps workflows and ensuring the security of applications throughout their lifecycle. Job Description In your new role you will: Develop and implement the strategic vision for application security within the platform engineering team. Lead cross-functional initiatives to drive security integration and best practices across the enterprise. Manage the deployment, configuration, and maintenance of AppSecOps applications across the organization with a large developer user base. Ensure that security tools and processes are scalable and meet the needs of the entire organization. Work closely with various teams to ensure seamless integration and operation of security applications. Direct threat modeling, risk assessments, and vulnerability analysis. Lead and coordinate major incident response efforts, including investigation, containment, and remediation of security incidents. Continuously monitor, detect, and respond to security threats and anomalies at an enterprise level. Your Profile You are best equipped for this task if you have: Bachelors or Masters degree in Computer Science, Cybersecurity, or related field. 7+ years of experience in application security, DevSecOps, or related roles, with substantial experience in managing AppSecOps applications across a large enterprise environment. Proficiency in programming and scripting languages such as Python, Java, or similar. Strong understanding of application security principles, threat modeling, and risk management. Experience with advanced security tools and technologies (e.g., SAST,DAST, RASP, SIEM). Knowledge of containerization technologies (Docker, Kubernetes) and cloud platforms (AWS, Azure, GCP). Excellent communication and interpersonal skills Ability to work effectively in a team-oriented environment. Strong problem-solving skills and an analytical mindset

Strong knowledge of web application security testing, API security testing Strong knowledge of Industry standard application security tools Burp Suite, Nmap, Zap proxy Strong knowledge of Industry standard DAST tool (example NetSparker) Strong knowledge in both static and dynamic assessments for desktop and mobile applications Strong knowledge in manual and automated testing process, focusing on OWASP methodology Strong Knowledge of vulnerability identification and remediation methodology. Knowledge of vulnerability assessments of network and security devices Strong knowledge of open source and commercial tools, proficient in Kali Linux based tools Mandatory skill sets VAPT, web application security testing, API security testing Preferred skill sets mobile security testing, DAST, penetration testing

The Service Line Support Analyst will collaborate closely with the business to understand and communicate their vulnerability hygiene and devise strategic remediation plans through targeted analysis and communication. In this role, the analyst will distil complex security data into actionable insights and communicate these effectively to both technical and non-technical stakeholders. The analyst will play a pivotal role in building the business confidence and collaboration with the Vulnerability Management program by fostering strong partnerships across the organization. Contributions will be instrumental in advancing our security posture and protecting the integrity of our services. Skills and attributes for success Basic understanding of information security and cybersecurity principles. Strong communication skills with the ability to convey technical information in a clear manner. Eagerness to learn and build relationships within the organization. Ability to work in a team environment and support senior team members. A proactive approach to problem-solving and the ability to prioritize tasks. To qualify for the role you must have 4+ years of experience in an information security role, with exposure to vulnerability management Familiarity with security control functionality and threat landscapes A willingness to engage with stakeholders and contribute to a collaborative work environment Basic experience in data analytics and reporting Strong knowledge of identifying and remediating vulnerabilities in an enterprise environment Demonstrated experience assessing and communication risk to all levels within an organization A fundamental understanding of security control functionality Experience working in a collaborative environment Ideally, you ll also have Analytics background Vulnerability management experience