Top Cyber Security Jobs in Kolkata

Provide operational support and development for enterprise identity and access systems (Ping Identity/ForgeRock). Build features, perform unit testing, create QA test steps, update ITSM/process documentation, troubleshoot incidents, mentor juniors, and collaborate with global security, development, and product teams to improve authentication, SSO/MFA, and identity governance.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Performs manual white-box penetration testing, application security assessments, vulnerability hunting, and code reviews across Atlassian software, platforms, and services. Partners with security, engineering, and infrastructure teams to validate technical controls and strengthen security. The role requires understanding web application and cloud security, coding in Java, Python, or Go, leading projects, mentoring practitioners, and communicating with technical teams.

The Staff Infrastructure Security Engineer will lead security initiatives, set architectural patterns, conduct security reviews, and mentor engineers while ensuring security in cloud infrastructures for GitLab.

Configure, manage, and troubleshoot firewalls, routing, switching, VPNs, NAT, and network security infrastructure. Monitor systems, resolve security and connectivity incidents, apply approved configuration changes, and maintain technical documentation. The role requires 1–2 years of network security or network administration experience, firewall expertise, strong TCP/IP knowledge, troubleshooting skills, and effective communication in a support or operations environment.

Designs and maintains the company’s Information Security Management System, conducts cyber, privacy, threat, and vulnerability assessments, manages incidents, documents security policies, completes customer security questionnaires, and supports compliance certifications including ISO 27001, SOC 2, and GDPR.

Oversees information security risks, compliance assessments, risk governance, audit support, remediation planning, and security posture improvements. Develops security risk and compliance standards, defines requirements for GRC tool implementation, coordinates team initiatives, reports transformation-program status, and engages stakeholders across the organization to strengthen information security practices.

Supports sales teams and partners with technical cloud security sales activities, including solution integration, product demonstrations, evaluations, RFP responses, architecture discussions, and enablement training. Advises technical and executive audiences on Varonis cloud products, security analytics, and threat detection. Requires customer-facing communication skills, cloud platform expertise, and familiarity with SaaS administration and security technologies.

Owns the design, development, operation, and scaling of SOAR playbooks, security automation workflows, and integrations across a 24/7 MDR platform. The role automates alert triage, enrichment, investigation, containment, and incident response while improving detection quality and analyst efficiency. Responsibilities include integrating SIEM, EDR/XDR, identity, cloud, and ticketing systems; defining automation KPIs; building dashboards; ensuring workflow reliability and observability; and partnering with SOC, incident response, threat hunting, and engineering teams.

Own application security across mobile apps, APIs, microservices, cloud infrastructure, AI products, and third-party integrations. Responsibilities include threat modeling, architecture reviews, penetration testing, secure coding, vulnerability management, incident response, SSDLC onboarding, CI/CD security tool integration, cloud hardening, developer training, and communicating risk. The role also assesses AI and LLM security risks and develops production guardrails and automation.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, and severity; communicate with clients and security researchers; escalate critical vulnerabilities through incident response; and contribute to tooling that improves the triage and validation process. The role requires strong application security knowledge, especially OWASP Top Ten vulnerabilities, and proficiency with security testing tools.

Designs and develops blockchain security products, core frameworks, APIs, infrastructure, and automation for large-scale distributed systems. Responsibilities include architecture standards, performance tuning, incident troubleshooting, system refactoring, continuous delivery, capacity management, and reusable libraries. The role also engages users, coordinates with cross-functional teams, and addresses security risks involving blockchain, smart contracts, wallets, and on-chain attacks.

Monitor and investigate security events across cloud, applications, infrastructure, and endpoints. Manage SIEM, SOAR, EDR, CSPM, and vulnerability-management activities; improve detections, alerts, playbooks, and automation; coordinate incident response; gather evidence for audits; and collaborate with technical, legal, privacy, and compliance teams. The role requires rotating 24/7 shifts, incident coordination, documentation, stakeholder communication, and continuous security-process improvement.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Supports enterprise cybersecurity operations, security engineering, incident investigations, security control deployment, compliance initiatives, monitoring, and risk reduction. The role assists with endpoint, identity, email, cloud, and application security, analyzes logs and forensic artifacts, supports tabletop exercises, and collaborates with infrastructure, service desk, cloud, engineering, and Fortive teams.

Monitor and investigate security events across endpoints, email, SIEM, cloud environments, and infrastructure. Manage CrowdStrike Falcon EDR and Check Point Harmony Email Security, perform threat hunting, incident response, vulnerability assessments, and penetration-testing coordination. Implement Azure and AWS security controls, review IAM configurations, support compliance frameworks and audits, maintain security policies and documentation, and track remediation of identified risks.

Conduct penetration tests and vulnerability assessments across applications, networks, APIs, cloud environments, and infrastructure. Analyze scan results, identify and prioritize weaknesses, document risk ratings, communicate findings to technical and non-technical stakeholders, recommend remediation, coordinate remediation activities, and maintain vulnerability, asset, and configuration databases.

The Solutions Architect will support India sales by assessing customer cloud security needs, designing tailored CNAPP solutions, leading POCs and technical demonstrations, and integrating solutions with AWS, Azure, GCP, and CI/CD environments. The role advises customers and partners on cloud security and DevSecOps, supports account strategy and technical closure, enables channel partners, creates technical collateral, and provides regional feedback to product and engineering teams.

Owns end-to-end security incident triage, investigation, containment, remediation, and documentation during non-US hours. Investigates events across SIEM, EDR, email, network, identity, and cloud platforms; performs root cause analysis; maintains playbooks and SOC documentation; prepares metrics and incident reports; coordinates shift handoffs; and recommends improvements to SOC tooling, processes, and automation. The role independently performs L2 investigations and L3 response duties for a global security operations team.

Perform vulnerability assessment and penetration testing (VAPT) across web, mobile, API, network, cloud, and infrastructure; identify and exploit vulnerabilities, produce technical reports with remediation recommendations, conduct source-code analysis, develop PoC exploits, participate in red/blue team exercises, and work with stakeholders to harden security posture.

Provide second-level security operations support: monitor, triage, investigate, and resolve incidents within SLAs. Manage tickets, perform operational tasks and changes, collaborate with automation teams, audit tickets for quality, recommend improvements, and support project work and escalations.

Lead implementation and management of global data security technologies (notably DLP), improve data protection processes, perform threat analysis and data monitoring, classify structured/unstructured data and access controls, collaborate with application security, produce analytics/KPIs, document runbooks, and train support teams.

Senior Site Reliability Engineer focused on security: maintain and harden production systems, automate reliability and security processes, respond to incidents, remediate vulnerabilities, and collaborate with engineering to improve observability and secure deployments.

Conduct security assessments, audits, threat modeling, and architecture reviews for IT and business solutions. Translate security strategies into requirements and use cases, advise stakeholders on compliance and best practices, assess suppliers and solutions, recommend risk remediation, and support secure implementations across cloud, network, application, ERP, data, and infrastructure domains. Help introduce and validate innovative security solutions while evaluating emerging AI technologies and their impact on organizational security.