Top Cyber Security Jobs in Mumbai

Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.

Provides cybersecurity consulting and implementation services for client environments. Conducts security and risk assessments, identifies vulnerabilities, manages information-security risks, and recommends mitigation strategies. Designs and implements security controls, policies, firewalls, intrusion prevention, access controls, and encryption. Supports audits, due diligence, secure infrastructure and application design, and ongoing security-posture improvements while advising technical and non-technical stakeholders.

Leads site security operations across multiple locations, developing security strategies, risk assessments, crisis response plans, asset protection programs, and compliance processes. Oversees budgets, security projects, vendors, patrols, incident response teams, training, documentation, and reporting. Protects infrastructure, personnel, stakeholders, and designated individuals while managing investigations, fraud prevention, security systems, and team development.

Supports enterprise cybersecurity operations, security engineering, incident investigations, security control deployment, compliance initiatives, monitoring, and risk reduction. The role assists with endpoint, identity, email, cloud, and application security, analyzes logs and forensic artifacts, supports tabletop exercises, and collaborates with infrastructure, service desk, cloud, engineering, and Fortive teams.

Conduct supplier and third-party security assessments, review controls and audit evidence, identify risks and gaps, recommend remediation, and monitor treatment plans throughout supplier lifecycles. Maintain risk records and metrics, support governance, audits, compliance initiatives, and executive reporting. Collaborate with procurement, legal, privacy, audit, business owners, suppliers, and security teams while improving third-party risk processes and promoting security best practices.

Manage end-to-end delivery of enterprise security technology projects, including CCTV modernization, centralized monitoring, access card replacement, system migrations, testing, commissioning, and handover. Coordinate clients, stakeholders, vendors, consultants, and operational teams while managing schedules, budgets, risks, quality, compliance, procurement, and governance requirements across multiple locations.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Leads third-party information security risk, compliance, controls, and cybersecurity oversight for member banks and payment providers. Manages stakeholder relationships with executives, regulators, and government bodies; conducts third-party assessments and audits; identifies and closes security gaps; oversees privacy compliance under DPDP and GDPR; and advises on IAM, cloud, application, infrastructure security, DevSecOps, and international security frameworks.

Manages fire safety and physical security for a commercial property in Mumbai. Supervises security personnel, oversees access control, surveillance, patrols, investigations, emergency response, fire drills, audits, compliance, staffing, vendor coordination, incident reporting, and disaster planning. The role also manages security budgets, training, documentation, site meetings, and communication with property managers, clients, tenants, and emergency responders.

Supports cybersecurity compliance activities, including training programs, compliance monitoring, audit preparation, reporting, documentation, record maintenance, and cross-departmental compliance projects. The intern will help manage compliance materials and centralized records while assisting with internal and external audit responses. Strong research, analytical, organizational, communication, and Microsoft Office skills are required, along with a degree in computer science, information technology, or a related field.

Leads security operations across airport networks, overseeing aviation security, loss prevention, risk assessments, incident response, regulatory compliance, crisis management, security technology, budgets, vendors, and team development. The role coordinates with airport leadership, law enforcement, intelligence agencies, CISF, BCAS, DGCA, ICAO, and other stakeholders to ensure consistent security standards, operational readiness, and protection of passengers, employees, assets, and infrastructure.

Lead and operate Identity and Access Management activities including account lifecycle, access role definition, incident response, audits, stakeholder management, onboarding of applications, process improvements, security training, and team leadership. Act as project manager for IAM initiatives and ensure scalable, resilient, and secure IAM operations.

Drive revenue, profitability, and market expansion for ACVS security products across Mumbai and the assigned territory. Develop enterprise accounts, consultant relationships, channel partnerships, and system-integrator networks; manage sales pipelines, specifications, tenders, forecasts, presentations, negotiations, and project closures. Position video surveillance, access control, and integrated security solutions across major industry verticals while achieving revenue, booking, margin, and market-growth targets.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Supports information security, privacy, and AI management programs aligned with ISO standards. Performs compliance monitoring, audit and risk assessment support, vendor risk reviews, security control health checks, and ticket management in ServiceNow GRC. Reviews security domains including vulnerability management, DLP, endpoint security, and SIEM, while preparing compliance dashboards, metrics, and management reports. Helps improve control effectiveness, reporting quality, and process efficiency.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Secure and improve Microsoft Azure environments through cloud security guardrails, landing zone governance, identity and access controls, networking, monitoring, encryption, secrets management, and compliance controls. Conduct posture reviews, remediate misconfigurations, support cloud incident investigations, secure infrastructure-as-code deployments, perform architecture reviews, and coordinate with engineering, Security Operations, GRC, and auditors.

Leads Jhpiego’s global security strategy, policies, risk mitigation, crisis and incident response, travel security, business continuity, investigations, training, and physical asset protection. Manages security vendors, intelligence networks, emergency response plans, executive travel safety, and global security personnel. Provides mentorship, cross-cultural leadership, and technical guidance across international programs, particularly in conflict-affected regions.

Provides 24/7 global client support for enterprise network security environments. Configures, manages, and troubleshoots Cisco FMC/FTD firewalls, VPNs, security policies, IDS/IPS, certificates, LAN/WAN infrastructure, routing and switching, and SD-WAN. Handles security incidents, escalated P1/P2 technical calls, risk remediation, and critical network issues while communicating directly with clients. Supports multi-vendor environments including Cisco and Arista.

Manage enterprise security and privacy controls, assess and mitigate information security risks, and ensure compliance with ISO 27001, NIST, GDPR, CRA, and related standards. The role integrates threat modeling and security practices into software development, develops security baselines and documentation, supports security programs, advises on customer contract controls, and validates the security posture of external vendors and cloud services.

Design, implement, secure, and support Microsoft Azure infrastructure, identity, networking, Windows environments, hybrid cloud platforms, and disaster recovery solutions. Manage Entra ID, Active Directory, authentication, access governance, MFA, Conditional Access, SSO, VPNs, firewalls, WAF, and related technologies. Automate infrastructure using Bicep, Terraform, and Azure Arc; support migrations and troubleshoot complex enterprise issues while providing technical guidance to customers.

Leads market-wide information security, cyber resilience, privacy governance, risk management, regulatory compliance, and assurance for India’s digital payments ecosystem. The role develops security frameworks, coordinates cyber drills and incident preparedness, drives privacy and DPDP readiness, manages systemic and third-party risk, engages regulators and industry stakeholders, and reports cybersecurity, privacy, and resilience metrics to executives and boards.

Own product security end to end, including vulnerability identification and remediation, secure SDLC practices, SOC 2 compliance, incident response, access controls, data protection, security tooling, vendor assessments, and audit readiness. Partner directly with engineering teams, review production code, strengthen security culture, communicate risk to leadership and external stakeholders, and support evolving compliance requirements such as ISO 27001.

Lead security operations activities including alert investigation, SIEM detection rule development and tuning, log coverage validation, vulnerability management, incident response, and security reporting. The role improves monitoring effectiveness by reducing false positives, identifying telemetry gaps, integrating security platforms, developing dashboards, automating processes, and supporting tabletop exercises. It requires cross-functional collaboration with infrastructure, cloud, application, and security teams, plus ownership of technical improvements from identification through validation.