Top Cyber Security Jobs in Mumbai

Lead and develop global Security Operations and Incident Response practices, manage an India-based IR team, oversee investigations, containment, remediation, detection engineering, post-incident reviews, threat monitoring, tabletop exercises, and continuous process improvement.

Lead detection engineering and incident response efforts: design and tune detections, triage and remediate incidents, perform forensics, maintain documentation and playbooks, mentor junior analysts, participate in exercises, and improve operational readiness across a global environment.

Lead TechOps, Cloud Infrastructure, DevOps, and Security strategy. Build scalable, secure AWS environments, implement IaC and CI/CD, enforce cloud governance, run incident and risk management, mentor teams, optimize costs, and integrate security into the SDLC.

Provide training in ethical hacking, cyber forensics, and IT security; perform VAPT, vulnerability assessments, network and web application penetration testing (manual and automated); use security tools and teach OWASP Top 10 and threat intelligence concepts.

Oversee and implement security policies and procedures, manage security staff and budgets, coordinate emergency response and event security, investigate incidents, analyze security data, and propose technology improvements to protect personnel and assets.

Install, configure, maintain, and troubleshoot firewalls and IPS; optimize rules and signatures; analyze network traffic; respond to security incidents and perform root cause analysis; design and maintain network security architecture and policies; coordinate with OEMs/TAC for upgrades and fixes; mentor junior staff and collaborate across teams.

Drive customer security transformation as a Microsoft Cloud Solution Architect focused on Purview Data Security, Sentinel and Defender XDR. Lead architecture design sessions, implement pilots, remove technical blockers, and act as a trusted advisor to enterprise customers to improve security posture, adoption, and operational health across identity, data, threat protection, and cloud security domains.

Lead a regional DevSecOps pod for follow-the-sun delivery, oversee ASPM integrations and AI-enabled secure code scanning, perform secure code reviews, resolve regional technical escalations, and mentor engineers to maintain 24/7 delivery in a regulated enterprise environment.

Provide technical pre-sales support for Cisco security portfolio: design and present tailored security solutions, translate business needs into technical architectures, lead technical presentations, and drive major account opportunities while enabling local teams.

Provide first-line managed security support for client firewall infrastructure: monitor systems, identify and investigate incidents, perform basic troubleshooting, escalate as needed, schedule maintenance, update knowledge articles, and support process improvements and disaster recovery tasks.

Provide second-line managed security support: monitor queues, investigate and resolve incidents within SLA, perform changes and maintenance, escalate appropriately, update knowledge articles, support automation and projects, and assist disaster recovery and client escalations.

Provide first-line monitoring and support for clients' firewall and security infrastructure, investigate and escalate incidents, maintain SLAs, perform maintenance scheduling, update knowledge articles, support automation and disaster recovery, and assist on projects as needed.

Provide L3 security managed services: proactively detect and resolve complex security incidents, manage high-complexity tickets, liaise with vendors, coach L2 staff, implement operational improvements, support projects and disaster recovery, and maintain SLA compliance.

Provide second-line managed security services: monitor and maintain SIEM (Splunk), investigate and remediate incidents, perform forensics and malware analysis, tune detections, manage SOC toolsets, document incidents, and support projects and vendor coordination to meet SLAs and compliance.

Provide L1 SOC support by monitoring and tuning SIEM, investigating alerts, managing incidents to closure, performing forensic analysis, maintaining SOC toolsets, developing automation, and ensuring compliance readiness.

Provide first-line SOC support for managed firewall and SIEM services: configure and maintain SIEM, monitor and investigate alerts, perform incident response and forensics (PCAP, malware analysis, vulnerability scanning), document tickets and reports, maintain SOC toolsets, automate response workflows, and collaborate with vendors. Ensure SLA adherence and support low-complexity incidents and projects. CEH certification required.

Provide second-line managed security services: monitor, investigate, and resolve incidents to meet SLAs. Integrate and configure UEBA tools and agents, perform threat modeling and risk assessments, use ticketing tools (ServiceNow), follow ITIL processes, and coordinate with vendors. Support projects as needed.

Entry-level information security role performing basic security tasks under guidance. Applies standard procedures to resolve limited-scope problems, learns professional concepts, exchanges routine information with colleagues, and determines actions using established guidelines. On-site position focused on growth within NTT DATA's inclusive environment.

Lead deployment, monitoring, and policy management of microsegmentation in datacenter environments. Troubleshoot network/security issues, enforce least-privilege policies, maintain documentation and reporting, investigate segmentation incidents, support forensics and remediation, follow ITIL processes, and manage ticketing and change requests to ensure compliance and reduce risk.

Provide first-line monitoring and support for clients' firewall infrastructure, investigate and route incidents, maintain SLAs, perform maintenance scheduling and shift handovers, update knowledge articles, identify automation and process improvements, and support disaster recovery and project work as needed.

Operate and maintain bank network security systems (NGFW, IPS, web proxy, sandboxing, Anti-DDoS). Monitor logs, respond to incidents, perform troubleshooting, firmware/patch management, integrate sandbox alerts with IR workflows, validate mitigations, coordinate stakeholders, and produce health reports. Collaborate with L3 for complex issues and participate in P1/P2 incident bridge calls.

Operate and maintain core network security systems (NGFW, IPS, proxy, sandboxing, Anti-DDoS). Monitor logs, analyze malware sandbox reports, respond to incidents, implement patches/firmware upgrades, manage proxy policies, validate DDoS protections, and coordinate incident remediation with stakeholders and L3 teams.

Provide L2 operational support for F5 BIG-IP WAF (ASM) and SSL Orchestrator (SSLO), monitor platform performance, troubleshoot web and SSL/TLS security incidents, deploy and tune WAF policies, perform configuration changes, develop SOPs/runbooks, coordinate incident RCA and remediation, and ensure compliance with bank security policies.

Provide remote L1 security technical support: investigate, diagnose and resolve incidents; maintain SLAs and configuration items; use service-assurance and ticketing tools; perform maintenance tasks; update knowledge articles; escalate and coordinate with vendors and stakeholders; generate reports and monitor service performance to prevent recurrence.

Provide L2 operational support and maintenance for F5 BIG-IP WAF (ASM) and SSL Orchestrator (SSLO), monitor platforms, troubleshoot security incidents, tune WAF policies, perform configuration changes, develop SOPs and runbooks, coordinate incident remediation, and ensure compliance with banking security and regulatory requirements.