Top Cyber Security Jobs in Mumbai

Support and maintain multi-framework compliance programs (SOX, ISO 27001, SOC 2, NIST, CMMC, etc.); coordinate evidence collection and audits; work with control owners; manage GRC platform; support third-party risk assessments; track and report risk and compliance metrics; drive continuous improvement and audit readiness.

Lead design, implementation, and delivery of enterprise network security (firewalls, proxy, WAF) across datacenter, DMZ, cloud and endpoints. Own vulnerability management, observability, logging/SIEM, certificate governance, automation (Python/Ansible), and compliance aligned to ITIL and regulatory requirements. Provide technical leadership for modernization projects, stakeholder engagement, runbooks, and continuous control improvement.

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead and align MSS with telecom cybersecurity strategy; implement GRC and risk frameworks; manage risk registers, audits, and incident response; ensure compliance with ISO 27001, NIST CSF, GDPR and communicate risk to executives and customers.

Lead enterprise security architecture: define strategy, design and validate Zero Trust, IAM, multi-cloud and AI security solutions, advise senior stakeholders, perform security assessments and remediation, drive security automation and integrations across DevOps and business units.

Lead evaluation and mitigation of security risks for telecom and data-center technologies (5G, Open RAN, cloud-native, edge). Produce structured security advisories, analyze emerging attacks, recommend secure architectures and segmentation, and collaborate with architecture, engineering, SOC, and leadership to ensure advisory adoption and resilient deployments.

Design, implement, and govern enterprise security architectures across applications, cloud, infrastructure, and networks. Lead threat modeling (STRIDE, MITRE ATT&CK); define security controls, guardrails, landing zones, CSPM and cloud-native controls for Azure/AWS/GCP. Oversee IAM/PAM/SSO/MFA/federation and ensure alignment with ISO27001, NIST, CIS Controls and SOC2. Collaborate with DevOps and architecture teams and present security decisions to stakeholders.

Assess and document security posture for emerging telecom and cloud-native technologies, identify systemic risks, publish structured security advisories, provide defensive guidance, and advise on secure data center builds and architectural resilience while collaborating with architecture, engineering, SOC, and leadership to ensure advisory adoption.

Lead and conduct security assessments, implement secure-by-design practices across IT and business solutions, translate strategies into actionable requirements, evaluate supplier security, identify and remediate vulnerabilities, develop security solutions for corporate infrastructure, and mentor junior team members.

Lead offensive security activities including vulnerability management, deep-dive penetration testing (infrastructure, web, mobile), red teaming/assume-breach simulations, telecom-targeted attacks, APT simulation using MITRE ATT&CK, attack surface and dark-web monitoring, and producing PoCs and remediation roadmaps while mentoring Blue Team members.

Lead application security efforts by governing vulnerability management, automating security workflows, embedding SSDLC practices, partnering with engineering/GRC to meet compliance, and serving as a security SME during incident response and customer escalations.

Design and implement SAP authorization concepts and role design, secure custom transactions and maintain SU24. Configure and manage SAP GRC Access Control and BRF+, ensure Segregation of Duties and SOX/ITGC compliance, support audits, collaborate cross-functionally (Functional, Developers, BASIS), refine security processes, test/implement changes, and document security requirements.

Lead design and implementation of cloud security controls across AWS and Azure; maintain CSPM and SOC 2 controls; secure container/Kubernetes environments; perform threat modeling, security architecture reviews, continuous vulnerability/compliance validation, incident monitoring/response, and collaborate with engineering teams to embed security practices.

Monitor and analyze security, system, application, and cloud logs for anomalies and incidents; use SIEM/SOAR/EDR and CSPM tools; coordinate incident response with cross-functional teams; maintain SOPs, playbooks, vulnerability assessments, and documentation; own shift responsibilities in a 24/7 SOC rotation.

Analyze security incidents and document findings clearly, producing tailored reports with root cause analysis, impact assessment, and remediation recommendations. Track and follow up on vulnerabilities, collaborate with SOC and IT teams, refine documentation processes, and support compliance and knowledge-base development.

Lead data security posture and DLP efforts: discover/classify sensitive data, assess and remediate data risks, enforce least privilege, monitor incidents, maintain DLP/DSPM tooling, ensure compliance (e.g., GDPR, DORA), and advise on securing AI/LLM training data.

Lead IT audit and compliance activities, perform risk assessments, identify vulnerabilities across networks, applications, databases and cloud platforms, analyze audit data, recommend remediation, ensure IT governance alignment, and communicate findings to technical and non-technical stakeholders while collaborating with cross-functional teams.

Entry-level Identity and Security Engineer role for freshers, focused on identity and security engineering tasks in an offshore setup. Suitable for candidates beginning a career in cybersecurity and identity management.

Design, build, test, and deploy scalable full-stack applications with emphasis on Java backend services and modern front-end frameworks. Implement cloud-native microservices, REST APIs, containerization, CI/CD pipelines, and support production performance, security, and observability in an Agile environment.

Developers who identify and fix security defects by applying OWASP secure coding practices. Learn existing codebases, locate vulnerabilities, and remediate issues by writing secure, best-practice code with minimal supervision.

Lead PCI DSS compliance for API and payment gateway services. Implement security controls, perform secure code reviews, vulnerability management, incident response, audit preparation, and train teams on security best practices while collaborating with DevOps, IT, and legal.

Lead perimeter and cloud edge security operations focused on WAF, API and email protections. Monitor SIEM/logs, analyze web traffic, tune WAF/bot protections, respond to incidents, coordinate with threat intel, vulnerability management and business ISOs, and advise stakeholders to improve external defense posture.

Investigate and remediate firmware vulnerabilities, perform security analysis of firmware and update mechanisms, support secure boot and signing, conduct threat modeling and risk assessments, maintain SBOMs and supplier security documentation, ensure alignment with product cybersecurity standards, and collaborate with firmware, QA, and compliance teams to embed security-by-design.