Top Cyber Security Jobs in Gurgaon

The posting provides limited responsibility details. The title indicates a Level 1 Security Operations Center analyst role focused on SIEM, SOAR, and UEBA technologies, while the description references joining a payroll team as a senior payroll analyst.

Monitor and analyze security events as a Level 1 SOC analyst using SIEM, SOAR, and UEBA technologies. Investigate alerts and support security operations. The description also references a Senior Payroll Analyst role, creating a mismatch with the stated SOC position.

The posting provides minimal detail and states that the role joins the Payroll team as a Senior Payroll Analyst. The title indicates an L2 SOC Security Engineer position focused on SIEM, SOAR, and UEBA technologies, but specific responsibilities are not provided.

Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Secures on-premises data center infrastructure, primarily VMware vSphere, vCenter, ESXi, virtual machines, and supporting identity, network, storage, backup, and logging services. Responsibilities include security engineering, hardening, access control, vulnerability remediation, SIEM integration, threat detection, incident response, migration security, recovery validation, compliance evidence, documentation, and cross-team security guidance.

Secures VMware and on-premises data center infrastructure through hardened configurations, vulnerability remediation, privileged-access controls, monitoring, detection engineering, incident response, and migration assurance. The role integrates infrastructure telemetry with SIEM platforms, validates backup and recovery controls, supports audits and risk assessments, develops security standards and automation, and coordinates remediation across security, infrastructure, engineering, compliance, and IT teams.

Manage end-to-end delivery of enterprise security technology projects, including CCTV modernization, centralized monitoring, access card replacement, system migrations, testing, commissioning, and handover. Coordinate clients, stakeholders, vendors, consultants, and operational teams while managing schedules, budgets, risks, quality, compliance, procurement, and governance requirements across multiple locations.

Security and Compliance Engineer responsible for application, cloud, AI, data, and infrastructure security in a healthcare environment. Duties include penetration testing, vulnerability remediation, DevSecOps integration, cloud security posture management, compliance initiatives for HIPAA, SOC 2, and HITRUST, threat modeling, secure code and architecture reviews, email and bot protection, AI security, incident response, data protection, audit support, and security documentation.

Develop and manage cloud and machine identity security across AWS, Azure, Kubernetes, APIs, and hybrid environments. The role focuses on secrets management, identity governance, authentication patterns, secure automation, and credential rotation. Responsibilities include developing automation scripts for secrets rotation and injection, integrating secrets platforms with cloud services, container orchestration, and microservices, and managing machine identity lifecycles using HashiCorp Vault, Azure Key Vault, and AWS Secrets Manager.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Designs and maintains scalable cybersecurity automation components, integrations, connectors, and playbooks for SOC workflows, incident response, threat investigation, and alert triage. Integrates SIEM, SOAR, EDR, vulnerability management, and threat intelligence platforms. Develops AI- and LLM-powered security workflows, converts customer requirements and proof-of-concepts into production solutions, and applies software engineering practices including testing, documentation, version control, and performance optimization.

Lead enterprise security architecture across networks, endpoints, cloud, SaaS, and AI ecosystems. Define security standards, cloud guardrails, Zero Trust and Secure-by-Design practices, IAM strategies, and AI security controls. Conduct architecture reviews, threat modeling, and risk assessments; guide incident response; and partner with Engineering, Product, IT, Legal, and executives to improve security maturity and regulatory alignment.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Leads regional growth of RSA Professional Services and Identity Security solutions. Advises executives and security leaders, develops IAM and IGA strategies, leads discovery workshops, shapes statements of work, supports strategic enterprise sales, and drives services bookings, attach rates, adoption, and customer outcomes. Serves as a thought leader across identity governance, authentication modernization, compliance, lifecycle management, and Zero Trust initiatives.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.

Supports enterprise cybersecurity operations, security engineering, incident investigations, security control deployment, compliance initiatives, monitoring, and risk reduction. The role assists with endpoint, identity, email, cloud, and application security, analyzes logs and forensic artifacts, supports tabletop exercises, and collaborates with infrastructure, service desk, cloud, engineering, and Fortive teams.

Conduct supplier and third-party security assessments, review controls and audit evidence, identify risks and gaps, recommend remediation, and monitor treatment plans throughout supplier lifecycles. Maintain risk records and metrics, support governance, audits, compliance initiatives, and executive reporting. Collaborate with procurement, legal, privacy, audit, business owners, suppliers, and security teams while improving third-party risk processes and promoting security best practices.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Supports endpoint security operations across EDR, DLP, UEBA, and related tools. Responsibilities include alert triage, threat hunting, detection rule development, incident response support, root cause analysis, endpoint hardening, policy management, documentation, metrics, and collaboration with SOC and infrastructure teams. The role requires foundational information security experience, endpoint security tooling knowledge, scripting ability, familiarity with MITRE ATT&CK, and understanding of Windows, macOS, or Linux security.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Provides 24/7 global client support for enterprise network security environments. Configures, manages, and troubleshoots Cisco FMC/FTD firewalls, VPNs, security policies, IDS/IPS, certificates, LAN/WAN infrastructure, routing and switching, and SD-WAN. Handles security incidents, escalated P1/P2 technical calls, risk remediation, and critical network issues while communicating directly with clients. Supports multi-vendor environments including Cisco and Arista.

Investigate and respond to security alerts and incidents across customer cloud, endpoint, identity, network, and SIEM/XDR environments. Responsibilities include threat hunting, detection engineering, incident response, EDR investigation, cloud security monitoring, threat intelligence, vulnerability analysis, and SOC automation. The engineer will improve detection coverage, reduce false positives, support containment and remediation, and map detections to MITRE ATT&CK while meeting customer SLAs.

Own product security end to end, including vulnerability identification and remediation, secure SDLC practices, SOC 2 compliance, incident response, access controls, data protection, security tooling, vendor assessments, and audit readiness. Partner directly with engineering teams, review production code, strengthen security culture, communicate risk to leadership and external stakeholders, and support evolving compliance requirements such as ISO 27001.