Top Cyber Security Jobs in Kolkata

Identify, triage, and remediate vulnerabilities in web applications and proprietary software. Refactor .NET/C# code, implement secure coding standards, conduct code reviews, support secure SDLC practices, and assess SAST, DAST, penetration testing, and bug bounty findings. Monitor emerging threats and OWASP Top 10 updates while supporting compliance with FERPA, COPPA, GDPR, UK GDPR, and other data protection standards. The role is fully remote but requires permanent residency in India and specified IST working hours.

Lead technical presales engagements across Southeast Asia, supporting customers and channel partners. Responsibilities include requirements gathering, solution presentations, demonstrations, RFI/RFP responses, proof-of-concepts, technical workshops, solution evaluations, functional specifications, partner enablement, and first-level evaluation support. The role requires strong IAM and cybersecurity expertise, knowledge of relevant protocols and infrastructure technologies, excellent communication skills, and international travel.

Configure, manage, and troubleshoot firewalls, routing, switching, VPNs, NAT, and network security infrastructure. Monitor systems, resolve security and connectivity incidents, apply approved configuration changes, and maintain technical documentation. The role requires 1–2 years of network security or network administration experience, firewall expertise, strong TCP/IP knowledge, troubleshooting skills, and effective communication in a support or operations environment.

Own and improve the security posture of Kestra’s platform, infrastructure, and open-source ecosystem. Responsibilities include penetration testing, threat modeling, vulnerability management, remediation, cloud and Kubernetes hardening, security automation in CI/CD, code reviews, supply-chain risk assessment, incident response, and continuous monitoring.

Conduct attacker-driven security research on Aave protocol changes, smart contracts, integrations, and critical dependencies. Review architecture and code before audits or deployment, identify exploitable protocol risks, contribute to AI-assisted security tooling, and translate findings into invariants, testing, monitoring, and incident-response improvements. Collaborate with engineers, auditors, and monitoring teams while communicating risk, severity, uncertainty, and trade-offs clearly.

Designs and manages IAM and IGA solutions focused on securing AI agents, MCP integrations, service accounts, applications, and other non-human identities. Responsibilities include access governance, provisioning, certifications, segregation-of-duties controls, credential-less authentication, AI-aware authorization, risk remediation, incident response, compliance reporting, and stakeholder collaboration. The role also configures IGA connectors, supports AI governance initiatives, and helps automate IAM operations.

Build and maintain security automation solutions, reusable components, playbooks, apps, and dashboards for Swimlane Turbine and its Marketplace. Translate SOC and MSSP workflows into configurable enterprise content, normalize security data using Python and JavaScript, integrate SIEM, EDR/XDR, identity, threat intelligence, ticketing, and cloud security tools, and incorporate controlled AI-assisted workflows. Own testing, documentation, versioning, release quality, and cross-functional collaboration.

Supports sales teams and partners with technical cloud security sales activities, including solution integration, product demonstrations, evaluations, RFP responses, architecture discussions, and enablement training. Advises technical and executive audiences on Varonis cloud products, security analytics, and threat detection. Requires customer-facing communication skills, cloud platform expertise, and familiarity with SaaS administration and security technologies.

Owns the design, development, operation, and scaling of SOAR playbooks, security automation workflows, and integrations across a 24/7 MDR platform. The role automates alert triage, enrichment, investigation, containment, and incident response while improving detection quality and analyst efficiency. Responsibilities include integrating SIEM, EDR/XDR, identity, cloud, and ticketing systems; defining automation KPIs; building dashboards; ensuring workflow reliability and observability; and partnering with SOC, incident response, threat hunting, and engineering teams.

Own application security across mobile apps, APIs, microservices, cloud infrastructure, AI products, and third-party integrations. Responsibilities include threat modeling, architecture reviews, penetration testing, secure coding, vulnerability management, incident response, SSDLC onboarding, CI/CD security tool integration, cloud hardening, developer training, and communicating risk. The role also assesses AI and LLM security risks and develops production guardrails and automation.

Conduct penetration tests and vulnerability assessments across applications, networks, APIs, cloud environments, and infrastructure. Analyze scan results, identify and prioritize weaknesses, document risk ratings, communicate findings to technical and non-technical stakeholders, recommend remediation, coordinate remediation activities, and maintain vulnerability, asset, and configuration databases.

The Solutions Architect will support India sales by assessing customer cloud security needs, designing tailored CNAPP solutions, leading POCs and technical demonstrations, and integrating solutions with AWS, Azure, GCP, and CI/CD environments. The role advises customers and partners on cloud security and DevSecOps, supports account strategy and technical closure, enables channel partners, creates technical collateral, and provides regional feedback to product and engineering teams.

Perform vulnerability assessment and penetration testing (VAPT) across web, mobile, API, network, cloud, and infrastructure; identify and exploit vulnerabilities, produce technical reports with remediation recommendations, conduct source-code analysis, develop PoC exploits, participate in red/blue team exercises, and work with stakeholders to harden security posture.

Provide second-level security operations support: monitor, triage, investigate, and resolve incidents within SLAs. Manage tickets, perform operational tasks and changes, collaborate with automation teams, audit tickets for quality, recommend improvements, and support project work and escalations.

Lead implementation and management of global data security technologies (notably DLP), improve data protection processes, perform threat analysis and data monitoring, classify structured/unstructured data and access controls, collaborate with application security, produce analytics/KPIs, document runbooks, and train support teams.

Senior Site Reliability Engineer focused on security: maintain and harden production systems, automate reliability and security processes, respond to incidents, remediate vulnerabilities, and collaborate with engineering to improve observability and secure deployments.

Leads enterprise security architecture strategy and complex cross-functional initiatives involving Zero Trust, IAM, multi-cloud security, network and application segmentation, AI security, data protection, and cyber resiliency. Advises executives and stakeholders on security roadmaps, supplier risks, M&A due diligence, regulatory matters, and vulnerability remediation. Designs and validates security solutions, promotes automation and innovation, and delivers security transformations across a global organization.

The Vice President will lead the Global Security Department in India, overseeing security policies, investigations, and collaboration with business leaders to mitigate risks and ensure the safety of assets and personnel.

Lead offensive and defensive security engineering for a threat-hunting product: emulate attackers, perform threat research, design workflows, validate detection accuracy, run penetration tests and simulations, collaborate with data science, and guide product teams on security best practices.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Lead application security efforts by governing vulnerability management, automating security workflows, embedding SSDLC practices, partnering with engineering/GRC to meet compliance, and serving as a security SME during incident response and customer escalations.

Lead IT audit and compliance activities, perform risk assessments, identify vulnerabilities across networks, applications, databases and cloud platforms, analyze audit data, recommend remediation, ensure IT governance alignment, and communicate findings to technical and non-technical stakeholders while collaborating with cross-functional teams.

Entry-level Identity and Security Engineer role for freshers, focused on identity and security engineering tasks in an offshore setup. Suitable for candidates beginning a career in cybersecurity and identity management.

Developers who identify and fix security defects by applying OWASP secure coding practices. Learn existing codebases, locate vulnerabilities, and remediate issues by writing secure, best-practice code with minimal supervision.