Top Cyber Security Jobs in Mumbai

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Lead application security by shifting left: perform threat modeling and secure design reviews, deploy SAST/DAST/SCA/secrets scanning, integrate security into CI/CD, run code reviews, track remediation SLAs, maintain asset inventory, lead Security Champions, train developers, and evaluate security tools and automation.

Lead threat modeling for AWS applications, integrate security into cloud designs, assess and mitigate risks, automate security tooling, support incident response and vulnerability management, ensure compliance, and train/mentor engineering teams on AWS security best practices.

Analyze application risks and implement security controls for web, mobile, and cloud platforms. Perform vulnerability assessments, drive remediation with engineering teams, and integrate security into SDLC/CI-CD pipelines. Ensure adherence to OWASP and security benchmarks, monitor cloud configurations for risks, and implement identity, access, and data protection controls.

Monitor, investigate, and respond to security alerts using SIEM/SOAR and EDR/XDR. Triage incidents, perform network and endpoint forensics, lead incident response activities, threat hunt, leverage MITRE ATT&CK, and collaborate with engineering and operations to remediate risks and improve SOC processes. Participate in shift/on-call coverage and produce security metrics and documentation.

Manage end-to-end delivery of managed services focused on vulnerability remediation, SLA-driven outcomes, SDLC compliance, stakeholder communication, team ramp-up, and adoption of automation and AI to improve throughput and reduce risk.

Lead and own threat modeling for GCP-hosted systems: identify threats, vulnerabilities, and mitigations; integrate threat modeling into SDLC and CI/CD; advise on controls, conduct risk assessments, support incident post-mortems, mentor teams, and drive threat-modeling tool adoption and training.

Design, implement, monitor, and secure hybrid cloud and infrastructure environments. Lead SOC 2 Type II audit support, manage SIEM (Microsoft Sentinel), conduct incident response, threat hunting, vulnerability management, and implement cloud security across Azure and AWS. Automate security operations, maintain identity and privileged access controls, support infrastructure modernization, and document compliance and playbooks.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Design, implement, and operate security controls across cloud, infrastructure, and SaaS. Lead identity, detection, vulnerability, and incident response efforts; automate controls with IaC; support compliance (SOC 2, ISO 27001); mentor engineers and drive security architecture and detection engineering.

Lead end-to-end delivery of regional security technology projects across APAC, managing planning, approvals, execution, testing and handover. Coordinate stakeholders, IT, vendors and system integrators to deploy access control, CCTV and intrusion detection systems. Ensure governance, compliance, budgets, schedules and technical/infrastructure readiness are met while resolving delivery issues and validating outputs.

Perform patrols and static-post duties to maintain safety and order in the mall. Respond to and report emergencies, manage traffic and crowd control, monitor construction and maintenance works, enforce safety and fire regulations, assist tenants and shoppers, oversee outsourced security guards, and document incidents. Requires basic first aid, investigation skills, and knowledge of Auxiliary Police rules.

Provide remote technical support by diagnosing and resolving incidents, maintaining service quality, and coordinating with stakeholders to ensure SLA compliance.

The Security Remote Field Service Engineer (L1) provides remote technical support, diagnoses and resolves incidents, and maintains service level agreements, operating in an entry-level capacity.

The Principal UI Engineer will develop front-end applications for AI-driven cybersecurity solutions, lead UI development, conduct code reviews, and collaborate with teams to enhance software quality.

Develop and optimize LLMs, evaluate model performance, integrate advanced AI technologies, lead cross-functional collaboration, and document methodologies.

Provide front-line technical support for a portfolio of small-to-mid customers: troubleshoot platform/configuration/integrations, assist onboarding, prepare technical materials, co-lead workshops, document runbooks, and escalate product issues. Build cloud (AWS/Azure/GCP) and cloud-security knowledge while working with CSMs, Support, and Engineering.

Provide front-line technical support and onboarding for small-to-mid customer accounts, troubleshoot platform/configuration/integration issues, assist in workshops and reviews, document runbooks, escalate product issues, and build cloud security knowledge.

Lead technical interactions with customers, design solutions, create proposals, and collaborate with internal teams to capture market opportunities and improve product functionality.