Top Cyber Security Jobs in Kolkata

The Product Security Engineer partners with development teams to secure cloud-native and SaaS products throughout the software development lifecycle. Responsibilities include threat modeling, security assessments, secure design reviews, cloud security investigations, automation of security controls and detection, incident remediation, stakeholder guidance, and continuous improvement of security processes and tooling.

Lead product security initiatives across the software development lifecycle. Conduct threat modeling and security assessments, review cloud application designs, build security automation and detection controls, support cloud incident response, and guide engineering teams on secure development. The role also requires identifying AI/LLM risks, collaborating with technical and non-technical stakeholders, improving security processes, and mentoring security practitioners.

Leads cybersecurity data-source onboarding and integration for Zscaler’s security platform. Builds and automates Python/API-based data transformations, maps and normalizes security data, manages pipeline lifecycle activities, troubleshoots data quality, and identifies security gaps. Partners with cybersecurity SMEs and cross-functional teams to create implementation plans, communicate technical findings, and provide product improvement feedback. The role requires expertise in security platforms, diverse security-tool integrations, data modeling, SQL, and Python.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Builds, modernizes, and operates Walmart’s enterprise SailPoint IdentityIQ platform. Designs identity lifecycle workflows, access governance, policy controls, integrations, custom connectors, APIs, and automation across directories, HR systems, mainframes, cloud platforms, and enterprise applications. Leads platform upgrades, hardening, monitoring, incident response, high availability, and disaster recovery while ensuring scalability, compliance, and reliability.

Design and scale automation and AI-driven solutions for security governance, risk, and compliance. Build evidence-collection pipelines, integrate GRC platforms with security and IT systems, develop scripts and workflow tools, and apply LLMs to control testing, evidence review, policy mapping, and risk reporting. Establish guardrails for accurate and compliant AI outputs while partnering with security, engineering, data, and business teams to improve compliance operations and security posture.

Owns the enterprise DLP program, secures Azure and AWS environments, and leads high-severity security incident response outside US hours. Responsibilities include DLP policy design and tuning, cloud security assessments, remediation, identity and workload hardening, alert escalation, MSSP integration, L2 team enablement, automation playbooks, audit support, and security metrics reporting. The role requires collaboration with Legal, IT, business stakeholders, and global security teams while maintaining ISO 27001 and privacy compliance.

Leads the strategy, engineering, and security of a global remote-workspace platform spanning collaboration tools, productivity applications, zero-trust access, IAM, and AI agents. Oversees secure platform architecture, data protection, offensive security, vulnerability management, and incident response. Builds APIs and integrations, drives AI governance, sets organizational goals, and leads distributed engineering, product, and support organizations through managers.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Manage information security compliance and operational initiatives, including ISO 27001, SOC 2, and HIPAA programs; coordinate audits, evidence, policies, controls, risk remediation, vendor assessments, access reviews, vulnerability management, incident response, security awareness, and business continuity activities. Lead ambiguous technical initiatives through planning, stakeholder coordination, implementation, and completion while serving as a key contact for auditors and business partners.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Lead the end-to-end design, development, deployment, and operation of highly available backend services for endpoint data security. Establish architectural direction, improve reliability and observability, drive engineering standards, conduct code reviews, manage technical initiatives, and mentor engineers. The role requires extensive Golang experience, cloud scaling expertise, CI/CD knowledge, observability experience, and the ability to influence AI-assisted development practices.

Design, configure, enhance, and deploy SAP Security Cloud Applications. Troubleshoot complex security and application issues, manage application lifecycle processes, integrate enterprise systems, and lead optimization initiatives. Serve as a subject matter expert, collaborate across teams, make technical decisions, and mentor junior team members.

Provide hands-on Oracle ERP Cloud security consulting, including role creation and customization, job and duty roles, function and data security, Segregation of Duties, Risk Management Cloud, Advanced Access Controls, Advanced Financial Controls, and security-sensitive access analysis.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Monitor, triage, and investigate cybersecurity alerts across SIEM, EDR, cloud, endpoint, network, and enterprise environments. Analyze logs, investigate suspicious activity, support incident response and remediation, coordinate escalations, improve detection quality, tune whitelists, and prepare technical reports. Maintain SOC documentation and contribute to operational improvements within a global 24/7 security operations centre.

Lead and execute offensive security assessments across web, mobile, thick-client, API, and network environments. Identify and validate vulnerabilities, simulate real-world attacks, perform risk assessments, manage vulnerability lifecycles, and deliver actionable reports. The role also includes improving security processes, managing engagement timelines, communicating with technical and executive audiences, and mentoring security professionals.

Performs manual white-box penetration testing, application security assessments, vulnerability hunting, and code reviews across Atlassian software, platforms, and services. Partners with security, engineering, and infrastructure teams to validate technical controls and strengthen security. The role requires understanding web application and cloud security, coding in Java, Python, or Go, leading projects, mentoring practitioners, and communicating with technical teams.

Designs and governs global Workday security architecture, including domain and business process policies, security groups, data segregation, masking, access provisioning, audits, compliance tracking, and release regression testing. The role protects sensitive employee and financial information across regions and supports SOC and GDPR controls.

Designs and governs secure multi-cloud architectures across AWS, Azure, and GCP. Responsibilities include zero-trust landing zones, IAM and RBAC, encryption and key management, container and Kubernetes security, CSPM and CWPP integration, policy-as-code automation, DevSecOps security testing, and incident-response readiness. The role requires extensive enterprise infrastructure security experience, cloud security architecture expertise, infrastructure-as-code knowledge, threat modeling skills, and a mandatory security certification.

Leads enterprise cybersecurity strategy, governance, budgets, incident response, compliance, risk communication, and executive security programs. Advises C-suite leaders and boards, oversees security roadmaps and vendor investments, directs crisis simulations and post-breach response, and mentors cybersecurity teams. The role requires extensive executive cybersecurity leadership, digital forensics expertise, advanced forensic tooling, and CISM, CISSP, GCFA, GCIH, or CCE certification.

Designs and integrates application security controls into CI/CD pipelines and DevSecOps frameworks. Responsibilities include managing SAST, DAST, and SCA tools; triaging vulnerabilities; leading threat modeling; securing containers and Kubernetes workloads; governing vulnerability dashboards and secret vaults; hardening infrastructure as code; and investigating application-layer security incidents.