Top Cyber Security Jobs in Mumbai

Designs, configures, optimizes, and troubleshoots LAN, WAN, data center, wireless, cloud, and network security infrastructure. Manages routers, switches, firewalls, load balancers, VPNs, and monitoring systems; analyzes traffic and resolves performance issues. Creates technical documentation, contributes to migrations and infrastructure projects, collaborates with security and systems teams, communicates technical concepts, and mentors junior engineers.

Designs, configures, monitors, troubleshoots, and optimizes LAN, WAN, wireless, cloud, and data center networks. Manages network devices and security controls, analyzes traffic and performance, maintains technical documentation, and supports migrations, upgrades, and expansions. Collaborates with infrastructure, security, and application teams, contributes to network architecture and projects, communicates technical concepts, and mentors junior engineers.

Lead ISO 27001 and related audits for global clients, managing planning, fieldwork, reporting, and deliverables. Support clients using GRC platforms and automated evidence collection, contribute to audit methodology improvements and peer quality reviews, and conduct additional PCI DSS, HITRUST, and FedRAMP assessments as needed. The role requires strong ISO standards knowledge, audit experience, communication skills, flexibility across time zones, and possible domestic or international travel.

The MS Engineer L3 will manage complex incidents, ensure client infrastructure is operational, mentor junior members, and improve service quality. Responsibilities include incident resolution, documentation, and vendor engagement.

The Senior MS Engineer - Linux provides second-line support for IT infrastructure and services, ensuring operational continuity, resolving incidents, and contributing to project work.

Provide L3 managed services for cross-technology client infrastructure (WebLogic, cloud, networking, security). Proactively resolve complex incidents, meet SLAs, mentor L2, create knowledge articles, liaise with vendors, support automation, and assist with projects and disaster recovery.

This role involves supporting sales by designing Cisco solutions, presenting demonstrations, assisting in RFP responses, and facilitating partner training. The architect must leverage strong Cisco product knowledge and work with account teams to identify opportunities.

Perform end-to-end SOC 2 audits for startup clients: create audit plans and system descriptions, run on-screen walkthroughs during US Central hours, collect evidence, review tester results, escalate issues, and deliver 5–10 reports monthly while managing a book of 20+ clients.

Provide L2 operational support and administration for F5 BIG-IP WAF (ASM) and SSL Orchestrator. Monitor platforms, respond to incidents, tune WAF policies, perform SSLO configuration, troubleshoot security events, escalate to L3/TAC, maintain SOPs/runbooks, ensure compliance with banking security requirements, and coordinate remediation and RCA across stakeholders.

Provide operational support and development for enterprise identity and access systems (Ping Identity/ForgeRock). Build features, perform unit testing, create QA test steps, update ITSM/process documentation, troubleshoot incidents, mentor juniors, and collaborate with global security, development, and product teams to improve authentication, SSO/MFA, and identity governance.

Lead and supervise a Security Settlements team ensuring equity and fixed income trades settle on contractual date, manage DTC processes, escalate and resolve issues, oversee controls and regulatory reporting, drive efficiency and strategic initiatives, and develop staff while partnering with business units and global counterparts.

Design, implement, and manage cloud security architectures and tools (CNAPP/CSPM/CWPP/CIEM). Onboard cloud accounts to Wiz/Prisma, define policies, prioritize and remediate findings, develop automation/playbooks, assist incident response, ensure compliance, and advise clients on cloud security posture improvements.

Provide data security consulting services to clients of KPMG India, leveraging the firm's global network and industry-focused, technology-enabled approaches. Support compliance with local laws and deliver performance-based security solutions.

The role involves managing EDR and SIEM tools, analyzing alerts, coordinating incident responses, and supporting security operations and compliance tasks.

Perform manual and automated penetration testing and red team engagements across networks, applications, mobile, cloud, and Active Directory. Use offensive tools (Cobalt Strike, Metasploit, Burp Suite, etc.), map techniques to MITRE ATT&CK, develop custom exploits/scripts, conduct SAST/SCA code analysis, produce technical reports, and work with stakeholders and SOC/Blue teams to remediate vulnerabilities and run purple-team exercises.

Perform application vulnerability assessments including white-box security code reviews, automated code scans, and OWASP benchmarking. Create security test scenarios, execute tests, analyze findings, recommend mitigations, and produce test reports with walkthroughs for development and management.

Lead information security strategy and IPO readiness, ensure RBI/SEBI compliance, oversee security architecture (cloud/AWS, web/mobile, APIs), run DevSecOps and 24/7 CSOC/SIEM operations, manage VAPT/Red Teaming and incident response, and govern third-party/vendor security and data privacy (DPDP/ISO27001).

Operate as an L2 SecOps engineer managing Palo Alto and FortiGate firewalls: create security and NAT rules, configure profiles and VPNs, perform firmware upgrades, backups, device monitoring, troubleshoot L4/L7 issues and high CPU, follow ITIL change/incident processes, maintain inventory, create SOPs, and handle TAC cases end-to-end.

L2 Network Security Specialist responsible for firewall and load-balancer operations: rule and NAT creation, security/profile/log forwarding configuration, troubleshooting L4/L7 issues and high CPU, VPN (GlobalProtect), firmware upgrades, backups, device and health monitoring, incident/change management per ITIL, inventory, SOPs, load-balancer VIP and session persistence, and managing TAC cases end-to-end.

Senior L3 SecOps engineer responsible for Palo Alto and FortiGate firewall operations: rule and NAT creation, security and log profiles, VPN, firmware and backup management, monitoring and incident/P1 escalation handling, designing HLD/LLD reviews, change/incident management per ITIL, RCA, TAC management, team training and shift/operations management, and customer/stakeholder engagement.

Operate and maintain network security devices (Palo Alto, FortiGate, load balancers). Create security and NAT rules, configure security/log profiles, troubleshoot L4/L7 application and NAT issues, manage GlobalProtect VPN, perform backups and firmware upgrades, monitor device health and alerts, follow ITIL change/incident processes, maintain inventory, create SOPs, and manage TAC cases and load balancer session logic.

Operate, program, commission, maintain and troubleshoot physical security systems (access control, CCTV, intercoms). Manage installations and vendors, perform site risk analysis, support audits and investigations, and provide technical support to security and cross-functional teams.

Support execution of information security, privacy, and AIMS programs aligned to ISO standards. Perform compliance checks, track audit tickets in ServiceNow GRC, assist audits and risk assessments, monitor security tools (Vulnerability Management, DLP, SIEM, endpoint), and produce periodic compliance/security reports and metrics.

Perform proactive, hypothesis-driven threat hunting across logs, network traffic, endpoints, and telemetry; develop hunt playbooks, collaborate with detection engineering, support incident response, and research emerging threats and mitigations.

Support security architecture by coordinating technical reviews, stakeholder engagement, tracking remediation, preparing reports, maintaining review records, and improving review workflows while managing multiple priorities with minimal oversight.