Top Cyber Security Jobs in Kolkata

Lead data security posture and DLP efforts: discover/classify sensitive data, assess and remediate data risks, enforce least privilege, monitor incidents, maintain DLP/DSPM tooling, ensure compliance (e.g., GDPR, DORA), and advise on securing AI/LLM training data.

Lead IT audit and compliance activities, perform risk assessments, identify vulnerabilities across networks, applications, databases and cloud platforms, analyze audit data, recommend remediation, ensure IT governance alignment, and communicate findings to technical and non-technical stakeholders while collaborating with cross-functional teams.

Entry-level Identity and Security Engineer role for freshers, focused on identity and security engineering tasks in an offshore setup. Suitable for candidates beginning a career in cybersecurity and identity management.

Developers who identify and fix security defects by applying OWASP secure coding practices. Learn existing codebases, locate vulnerabilities, and remediate issues by writing secure, best-practice code with minimal supervision.

Lead PCI DSS compliance for API and payment gateway services. Implement security controls, perform secure code reviews, vulnerability management, incident response, audit preparation, and train teams on security best practices while collaborating with DevOps, IT, and legal.

Lead perimeter and cloud edge security operations focused on WAF, API and email protections. Monitor SIEM/logs, analyze web traffic, tune WAF/bot protections, respond to incidents, coordinate with threat intel, vulnerability management and business ISOs, and advise stakeholders to improve external defense posture.

Investigate and remediate firmware vulnerabilities, perform security analysis of firmware and update mechanisms, support secure boot and signing, conduct threat modeling and risk assessments, maintain SBOMs and supplier security documentation, ensure alignment with product cybersecurity standards, and collaborate with firmware, QA, and compliance teams to embed security-by-design.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Lead application security by shifting left: perform threat modeling and secure design reviews, deploy SAST/DAST/SCA/secrets scanning, integrate security into CI/CD, run code reviews, track remediation SLAs, maintain asset inventory, lead Security Champions, train developers, and evaluate security tools and automation.

Lead threat modeling for AWS applications, integrate security into cloud designs, assess and mitigate risks, automate security tooling, support incident response and vulnerability management, ensure compliance, and train/mentor engineering teams on AWS security best practices.

Analyze application risks and implement security controls for web, mobile, and cloud platforms. Perform vulnerability assessments, drive remediation with engineering teams, and integrate security into SDLC/CI-CD pipelines. Ensure adherence to OWASP and security benchmarks, monitor cloud configurations for risks, and implement identity, access, and data protection controls.

Monitor, investigate, and respond to security alerts using SIEM/SOAR and EDR/XDR. Triage incidents, perform network and endpoint forensics, lead incident response activities, threat hunt, leverage MITRE ATT&CK, and collaborate with engineering and operations to remediate risks and improve SOC processes. Participate in shift/on-call coverage and produce security metrics and documentation.

Manage end-to-end delivery of managed services focused on vulnerability remediation, SLA-driven outcomes, SDLC compliance, stakeholder communication, team ramp-up, and adoption of automation and AI to improve throughput and reduce risk.

Lead and own threat modeling for GCP-hosted systems: identify threats, vulnerabilities, and mitigations; integrate threat modeling into SDLC and CI/CD; advise on controls, conduct risk assessments, support incident post-mortems, mentor teams, and drive threat-modeling tool adoption and training.

Design, implement, monitor, and secure hybrid cloud and infrastructure environments. Lead SOC 2 Type II audit support, manage SIEM (Microsoft Sentinel), conduct incident response, threat hunting, vulnerability management, and implement cloud security across Azure and AWS. Automate security operations, maintain identity and privileged access controls, support infrastructure modernization, and document compliance and playbooks.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Design, implement, and operate security controls across cloud, infrastructure, and SaaS. Lead identity, detection, vulnerability, and incident response efforts; automate controls with IaC; support compliance (SOC 2, ISO 27001); mentor engineers and drive security architecture and detection engineering.

Lead 24/7 data center network and security operations, monitor SIEM, troubleshoot firewalls, WAF, VPN, and L2/L3 routing, coordinate escalations with L2/L3 teams and vendors, perform audits and ITIL-aligned incident/problem/change management, and maintain SLAs and KPIs.

Provide front-line technical support for a portfolio of small-to-mid customers: troubleshoot platform/configuration/integrations, assist onboarding, prepare technical materials, co-lead workshops, document runbooks, and escalate product issues. Build cloud (AWS/Azure/GCP) and cloud-security knowledge while working with CSMs, Support, and Engineering.