Top Cyber Security Jobs in Gurgaon

Lead application security across One Identity’s products by threat modeling designs, defining security requirements, reviewing and fixing code, tuning security testing tools, managing vulnerability response and coordinated disclosure, overseeing SBOM and software composition analysis, and advising engineering on AI-assisted development. The role requires deep C#/.NET expertise, Java fluency, product security experience, and the ability to embed practical security controls throughout the software development lifecycle.

Defines enterprise security architecture strategy and standards across Nokia, leading complex initiatives involving Zero Trust, IAM, multi-cloud security, application and network segmentation, AI security, and cyber resiliency. Advises senior stakeholders on security strategy, supplier risk, M&A due diligence, and regulatory matters. Assesses vulnerabilities, validates security solutions, supports penetration testing and hardening, and delivers automated security capabilities across cloud-first infrastructure and DevSecOps environments.

Own platform architecture, infrastructure security, access controls, database maturity, and AWS migration. Write secure production code, establish infrastructure standards, review security changes, partner with InfoSec, mentor engineers, troubleshoot recurring failures, and guide DevOps implementation. The role also supports AI infrastructure, model serving, agent observability, React and TypeScript applications, and infrastructure security on-call responsibilities.

Manages physical security for a power plant, including threat assessments, vulnerability mitigation, workforce readiness, surveillance and access control. Coordinates with law enforcement and intelligence agencies, leads crisis response drills and investigations, and ensures compliance with industrial security requirements. The role requires extensive security operations experience in high-stakes industrial or sensitive environments, with military or senior police backgrounds also considered.

Manage and audit end-to-end IT infrastructure, including Windows and Linux servers, networking, virtualization, cloud platforms, security tools, backups, and disaster recovery. Troubleshoot incidents, perform root-cause analysis, support vulnerability remediation, maintain ITIL/ITSM processes, manage vendors and SLAs, and ensure infrastructure security, availability, compliance, and continuity. Maintain technical documentation and explore AI and automation opportunities for IT operations.

Plans and conducts PCI DSS audits, risk assessments, and gap analyses; gathers evidence, identifies noncompliance, recommends remediation, prepares audit reports, and supports QSA validation. Maintains PCI-related policies and controls, monitors regulatory changes, trains internal teams, and tracks remediation through closure. Requires strong knowledge of PCI DSS v4.0, IT security, risk management, audit practices, and related frameworks such as NIST and ISO 27001.

Designs, implements, and monitors security controls for AI/ML platforms, cloud infrastructure, applications, data pipelines, and DevSecOps workflows. Responsibilities include threat modeling, AI guardrails, CNAPP operations, cloud security assessments, incident response, security automation, infrastructure-as-code controls, and developing secure AI and cloud standards aligned with NIST, CIS, and Zero Trust principles.

Conduct regulatory compliance audits for financial-sector clients under RBI, SEBI, IRDAI, UIDAI, and related requirements. Interpret circulars and advisories, convert obligations into testable controls, perform risk assessments and evidence validation, identify gaps, prepare audit reports, support regulatory inquiries, and track remediation. The role requires engagement with executives, compliance teams, IT stakeholders, and regulators, plus strong documentation and stakeholder-management skills.

Build and improve information security and GRC processes, policies, controls, and procedures. Support ISO 27001 and SOC 2 readiness, audits, risk assessments, remediation tracking, customer security questionnaires, vendor assessments, and compliance initiatives. Collaborate with leadership, DevOps, Cloud, IT, Security teams, and auditors to strengthen security controls and establish scalable processes.

Lead and perform manual and automated application penetration tests (SAST/DAST) across web, network, and cloud environments; develop findings and remediation guidance; mentor staff; communicate results to clients and senior management; uphold security best practices and stay current on threats and tools.

Owns the enterprise DLP program, secures Azure and AWS environments, and leads high-severity security incident response outside US hours. Responsibilities include DLP policy design and tuning, cloud security assessments, remediation, identity and workload hardening, alert escalation, MSSP integration, L2 team enablement, automation playbooks, audit support, and security metrics reporting. The role requires collaboration with Legal, IT, business stakeholders, and global security teams while maintaining ISO 27001 and privacy compliance.

Manage information security compliance and operational initiatives, including ISO 27001, SOC 2, and HIPAA programs; coordinate audits, evidence, policies, controls, risk remediation, vendor assessments, access reviews, vulnerability management, incident response, security awareness, and business continuity activities. Lead ambiguous technical initiatives through planning, stakeholder coordination, implementation, and completion while serving as a key contact for auditors and business partners.

Owns the organization’s IT infrastructure, cloud services, networks, systems administration, helpdesk, device fleet, security, compliance, vendors, and IT budgets. Manages field-deployed tablets across distributed and low-connectivity environments, including provisioning, monitoring, maintenance, and updates. Establishes security policies, access controls, backups, incident response, audits, and DPDPA compliance. Builds scalable IT operations and incorporates AI-assisted monitoring, troubleshooting, documentation, and reporting.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Leads the design, development, deployment, customization, and maintenance of ServiceNow GRC solutions. Responsibilities include building REST and SOAP integrations, translating business requirements, managing technical teams and project delivery, supporting pre-sales, configuring Service Portal widgets and knowledge content, performing upgrades, and ensuring security, governance, and compliance requirements.

Own endpoint security for Windows and macOS devices, administer Bitdefender GravityZone and JumpCloud, manage MFA, SSO, access provisioning, onboarding and offboarding, and monitor security alerts. Ensure patching, device compliance, endpoint protection, and IT security controls. Investigate incidents, administer Google Workspace and Microsoft 365, provide L1/L2 technical support, maintain IT assets and documentation, and coordinate with vendors.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Monitor, triage, and investigate cybersecurity alerts across SIEM, EDR, cloud, endpoint, network, and enterprise environments. Analyze logs, investigate suspicious activity, support incident response and remediation, coordinate escalations, improve detection quality, tune whitelists, and prepare technical reports. Maintain SOC documentation and contribute to operational improvements within a global 24/7 security operations centre.

Leads end-to-end cloud and platform engineering consulting engagements, owning scope, governance, delivery quality, client relationships, and executive outcomes. Manages a 2–3 person engineering pod through staffing, coaching, and performance development. Oversees multi-cloud discovery across AWS, Azure, and GCP, develops prioritized recommendations and roadmaps, applies AI-driven solutions, and evolves repeatable Rapid Solutions playbooks, templates, and delivery standards.

Own end-to-end security incident response during non-US hours, including alert triage, investigation, containment, remediation, root cause analysis, documentation, and escalation. Maintain SOC playbooks and runbooks, produce incident reports and metrics, improve tooling and automation, and coordinate handoffs with US-based security staff. Investigate events across SIEM, EDR, email, network, identity, and cloud platforms while serving as the primary security operations contact for India-based stakeholders.

Identify, triage, and remediate vulnerabilities in web applications and proprietary software. Refactor .NET/C# code, implement secure coding standards, conduct code reviews, support secure SDLC practices, and assess SAST, DAST, penetration testing, and bug bounty findings. Monitor emerging threats and OWASP Top 10 updates while supporting compliance with FERPA, COPPA, GDPR, UK GDPR, and other data protection standards. The role is fully remote but requires permanent residency in India and specified IST working hours.

Lead technical presales engagements across Southeast Asia, supporting customers and channel partners. Responsibilities include requirements gathering, solution presentations, demonstrations, RFI/RFP responses, proof-of-concepts, technical workshops, solution evaluations, functional specifications, partner enablement, and first-level evaluation support. The role requires strong IAM and cybersecurity expertise, knowledge of relevant protocols and infrastructure technologies, excellent communication skills, and international travel.

Own technical direction and hands-on execution for major products, systems, and engineering initiatives. Design scalable systems across backend, frontend, APIs, databases, and infrastructure; write and review code; lead architecture decisions; solve production issues; convert ambiguous problems into technical plans; improve engineering quality; and mentor engineers across teams.

Lead technical ownership of AI-native, software-led, and device-integrated R&D projects: define architecture, build prototypes to production, integrate AI models and devices, mentor engineers, run pilots in real-world retail/diagnostic environments, and convert experiments into scalable systems.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.