Top Cyber Security Jobs in Kolkata

Lead the end-to-end design, development, deployment, and operation of highly available backend services for endpoint data security. Establish architectural direction, improve reliability and observability, drive engineering standards, conduct code reviews, manage technical initiatives, and mentor engineers. The role requires extensive Golang experience, cloud scaling expertise, CI/CD knowledge, observability experience, and the ability to influence AI-assisted development practices.

Design, configure, enhance, and deploy SAP Security Cloud Applications. Troubleshoot complex security and application issues, manage application lifecycle processes, integrate enterprise systems, and lead optimization initiatives. Serve as a subject matter expert, collaborate across teams, make technical decisions, and mentor junior team members.

Provide hands-on Oracle ERP Cloud security consulting, including role creation and customization, job and duty roles, function and data security, Segregation of Duties, Risk Management Cloud, Advanced Access Controls, Advanced Financial Controls, and security-sensitive access analysis.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Monitor, triage, and investigate cybersecurity alerts across SIEM, EDR, cloud, endpoint, network, and enterprise environments. Analyze logs, investigate suspicious activity, support incident response and remediation, coordinate escalations, improve detection quality, tune whitelists, and prepare technical reports. Maintain SOC documentation and contribute to operational improvements within a global 24/7 security operations centre.

Lead and execute offensive security assessments across web, mobile, thick-client, API, and network environments. Identify and validate vulnerabilities, simulate real-world attacks, perform risk assessments, manage vulnerability lifecycles, and deliver actionable reports. The role also includes improving security processes, managing engagement timelines, communicating with technical and executive audiences, and mentoring security professionals.

Own end-to-end security incident response during non-US hours, including alert triage, investigation, containment, remediation, root cause analysis, documentation, and escalation. Maintain SOC playbooks and runbooks, produce incident reports and metrics, improve tooling and automation, and coordinate handoffs with US-based security staff. Investigate events across SIEM, EDR, email, network, identity, and cloud platforms while serving as the primary security operations contact for India-based stakeholders.

Identify, triage, and remediate vulnerabilities in web applications and proprietary software. Refactor .NET/C# code, implement secure coding standards, conduct code reviews, support secure SDLC practices, and assess SAST, DAST, penetration testing, and bug bounty findings. Monitor emerging threats and OWASP Top 10 updates while supporting compliance with FERPA, COPPA, GDPR, UK GDPR, and other data protection standards. The role is fully remote but requires permanent residency in India and specified IST working hours.

Lead technical presales engagements across Southeast Asia, supporting customers and channel partners. Responsibilities include requirements gathering, solution presentations, demonstrations, RFI/RFP responses, proof-of-concepts, technical workshops, solution evaluations, functional specifications, partner enablement, and first-level evaluation support. The role requires strong IAM and cybersecurity expertise, knowledge of relevant protocols and infrastructure technologies, excellent communication skills, and international travel.

Configure, manage, and troubleshoot firewalls, routing, switching, VPNs, NAT, and network security infrastructure. Monitor systems, resolve security and connectivity incidents, apply approved configuration changes, and maintain technical documentation. The role requires 1–2 years of network security or network administration experience, firewall expertise, strong TCP/IP knowledge, troubleshooting skills, and effective communication in a support or operations environment.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Designs and manages IAM and IGA solutions focused on securing AI agents, MCP integrations, service accounts, applications, and other non-human identities. Responsibilities include access governance, provisioning, certifications, segregation-of-duties controls, credential-less authentication, AI-aware authorization, risk remediation, incident response, compliance reporting, and stakeholder collaboration. The role also configures IGA connectors, supports AI governance initiatives, and helps automate IAM operations.

Build and maintain security automation solutions, reusable components, playbooks, apps, and dashboards for Swimlane Turbine and its Marketplace. Translate SOC and MSSP workflows into configurable enterprise content, normalize security data using Python and JavaScript, integrate SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools, and incorporate controlled AI-assisted workflows. Own testing, documentation, versioning, release quality, and cross-functional collaboration.

Supports sales teams and partners with technical cloud security sales activities, including solution integration, product demonstrations, evaluations, RFP responses, architecture discussions, and enablement training. Advises technical and executive audiences on Varonis cloud products, security analytics, and threat detection. Requires customer-facing communication skills, cloud platform expertise, and familiarity with SaaS administration and security technologies.

Owns the design, development, operation, and scaling of SOAR playbooks, security automation workflows, and integrations across a 24/7 MDR platform. The role automates alert triage, enrichment, investigation, containment, and incident response while improving detection quality and analyst efficiency. Responsibilities include integrating SIEM, EDR/XDR, identity, cloud, and ticketing systems; defining automation KPIs; building dashboards; ensuring workflow reliability and observability; and partnering with SOC, incident response, threat hunting, and engineering teams.

Own application security across mobile apps, APIs, microservices, cloud infrastructure, AI products, and third-party integrations. Responsibilities include threat modeling, architecture reviews, penetration testing, secure coding, vulnerability management, incident response, SSDLC onboarding, CI/CD security tool integration, cloud hardening, developer training, and communicating risk. The role also assesses AI and LLM security risks and develops production guardrails and automation.

Conduct penetration tests and vulnerability assessments across applications, networks, APIs, cloud environments, and infrastructure. Analyze scan results, identify and prioritize weaknesses, document risk ratings, communicate findings to technical and non-technical stakeholders, recommend remediation, coordinate remediation activities, and maintain vulnerability, asset, and configuration databases.

The Solutions Architect will support India sales by assessing customer cloud security needs, designing tailored CNAPP solutions, leading POCs and technical demonstrations, and integrating solutions with AWS, Azure, GCP, and CI/CD environments. The role advises customers and partners on cloud security and DevSecOps, supports account strategy and technical closure, enables channel partners, creates technical collateral, and provides regional feedback to product and engineering teams.

Perform vulnerability assessment and penetration testing (VAPT) across web, mobile, API, network, cloud, and infrastructure; identify and exploit vulnerabilities, produce technical reports with remediation recommendations, conduct source-code analysis, develop PoC exploits, participate in red/blue team exercises, and work with stakeholders to harden security posture.

Provide second-level security operations support: monitor, triage, investigate, and resolve incidents within SLAs. Manage tickets, perform operational tasks and changes, collaborate with automation teams, audit tickets for quality, recommend improvements, and support project work and escalations.

Lead implementation and management of global data security technologies (notably DLP), improve data protection processes, perform threat analysis and data monitoring, classify structured/unstructured data and access controls, collaborate with application security, produce analytics/KPIs, document runbooks, and train support teams.

Senior Site Reliability Engineer focused on security: maintain and harden production systems, automate reliability and security processes, respond to incidents, remediate vulnerabilities, and collaborate with engineering to improve observability and secure deployments.