Vulnerability Job Vacancies in Bangalore

Cloud Security LeadExperience: 10-14 YearsLocation: BangaloreWe are hiring a Cloud Security Lead to lead cloud security architecture, governance, risk management, and security operations across enterprise cloud environments.Key ResponsibilitiesDefine and implement cloud security strategies and frameworks.Lead security architecture across AWS, Azure, or GCP environments.Implement IAM, network security, encryption, and data protection controls.Drive cloud security monitoring, vulnerability management, and incident response.Establish security policies, standards, and compliance controls.Work closely with Cloud, DevOps, Infrastructure, and Cybersecurity teams.Conduct security assessments and identify cloud security risks.Lead and mentor cloud security teams.Relevant SkillsCloud Security, AWS, Azure, GCP, IAM, Cloud Architecture, Network Security, Data Security, Encryption, Zero Trust, SIEM, Vulnerability Management, DevSecOps, Security Compliance, CSPM, Kubernetes

The major focus will be on Application Penetration testing followed by Network Penetration Testing and Mobile Security assessments, Red Team Assessment, Phishing, IoT, Cloud Pen testing (Azure and AWS, Google Cloud), Cloud Configuration Audit, Architecture Review. The work involves Test Case Creation, Penetration Testing, Source code reviews, Report Creation & presentation to stakeholders along with operation and construction of tools to assist in these tasks. Well versed with OWASP Top Ten and WASC Threat Classifications Expertise in Vulnerability Assessment and Penetration Testing of Web Applications BusinessLogic based application testing Penetration testing of Mobile applications and websites. Exploitation of the issues found and presenting the impact occurred Source Code Reviews Well versed in Java Secure Code Review Well versed in OWASP Code Review concepts & identifiers Familiar with popular tools: Application Proxy: Burp suite, Paros, OWASP ZAP, WireShark, Vulnerability Scanners: IBM AppScan, HP WebInspect, Nessus, NTO Spider. Exploit Toolkits: Metasploit, Exploit DB etc Understanding of the nature and sources of security vulnerabilities, how to identify and exploit Sound Knowledge of TCP/IP protocol Stack, HTTP protocol, encoding standards, encryption technologies and development frameworks. Skills Mandatory: Application Security Testing/Penetration Testing (Web-based, Thick client, web services, Mobile) Network Security Testing/Penetration Testing (Network, OS, Databases etc) Static Code Analysis/ Secure Code Review

Experience :7+yearsWork Mode:Work From Office Interview Mode: VirtualLocation :Bangalore Notice period 0 to 15 daysRoles and Responsibilities: Building Infrastructure as Code (IAC) for applications cloud infrastructure leveraging Terraform. Building end to end continuous integration (CI) and continuous deployment (CD) pipelines for public cloud deployments with a GitOps mindset Analyze, triage, and manage incoming security events based on various data points, log sources, and network statistics. Setup observability and telemetry leading to the build out of SEIM solution. Participate in chaos engineering to test application resiliency. Defines the set of declarative modules for infrastructure provisioning via Terraform Acts as an owner and SME for all things related to Kubernetes, Helm Charts, EKS, and Terraform Drives industry best practices and approaches to implementing infrastructure as code (IaC) specific, but not limited to Kubernetes infrastructure provisioning Actively engages and participates in technology forums related to Continuous Delivery, GitOps, DevOps and DevSecOps initiatives Provides sound recommendations to improve and/or implement best practices for supporting Onyx Toolchain strategy and initiatives Experience developing infrastructure and automation solutions in an always up, always available environment Hands-on keyboard coding as requiredRequired Skills: Experience in Java Application Support (Mandatory) Experience in Monitoring of the Java Application Post Production Deployment (Mandatory) Experience working in a DevSecOps (SAST & DAST) capacity within a large organization Minimum 3 years of hands-on experience with deploying and monitoring applications in A

Good understanding of, and experience with Information Risk Management, IT Security and Compliance and Security Controls and AuditAdvanced understanding of internal and external IT security standards, SOX, PCI, SOC2/1, ISO27001 standards and relevant legal compliance aspects.Robust understanding of, and solid experiences with the impact of Security on application development and operations as well as the IT Infrastructure.Ability to promote high performance teams, working with inclusiveness and cultural diversity, across organizational boundaries.Good understanding of cloud security requirements and third-party control assurance.Ability to interface with different groups (Third parties, Business and IT) internal and external to IT (security) and to network globally across Group businesses, as well as with external groups.Technical knowledge & relevant experience in security domains /technologies related to:Infrastructure/Network securityIdentity and Access ManagementBusiness Impact AssessmentApplication securityData Leakage PreventionEnd-Point ProtectionWeb filtering technologies, Proxies and firewalls.Vulnerability Assessment / Penetration TestingKnowledge of Data Security Standards, Privacy PrinciplesDriving Platform / Application security and complianceAbility to foresee and identify mitigation strategies for RisksCandidate must also:Display excellent communicating and influencing skillsDisplay analytical and problem-solving skillsBe pro-active and self-motivatedDisplay strong interpersonal and negotiating skills with all levels of staff.Display Ability and eagerness to quickly learn new technologies.QualificationsA qualification in CISSP, CISA, CRISC or CISM

DevSecOps ArchitectExperience: 9-14 YearsLocation: BangaloreJob OverviewWe are hiring a DevSecOps Architect to design and implement secure, scalable DevOps environments with security integrated throughout the software development lifecycle.Key ResponsibilitiesDesign enterprise DevSecOps architecture and security frameworks.Integrate security controls across CI/CD pipelines and cloud environments.Implement automated security testing, vulnerability scanning, and compliance checks.Define infrastructure, container, and application security standards.Work with DevOps, Cloud, Development, and Security teams.Implement security automation and shift-left security practices.Review architecture for security, scalability, and performance.Drive DevSecOps best practices, governance, and technical standards.Key SkillsDevSecOps, DevOps, CI/CD, AWS, Azure, Kubernetes, Docker, Terraform, Jenkins, GitLab, Security Automation, SAST, DAST, SCA, Cloud Security, Vulnerability Management, IAM

Cloud Security ArchitectExperience: 8-12 YearsLocation: BangaloreHiring Company: Talent Zone ConsultantJob Summary:Talent Zone Consultant is looking for an experienced Cloud Security Architect to design and implement secure, scalable cloud environments. The ideal candidate will have strong expertise in cloud security architecture, Zero Trust, IAM, DevSecOps, security monitoring, and enterprise security governance.Key Responsibilities:Design and implement secure cloud architectures across AWS, Azure, or GCP.Define and implement Zero Trust, IAM, network security, and security controls.Drive DevSecOps and Secure SDLC practices across cloud environments.Implement security monitoring, SIEM/SOC integration, threat detection, and incident response solutions.Conduct cloud security assessments, risk analysis, and compliance reviews.Collaborate with infrastructure, application, DevOps, and cybersecurity teams.Develop security standards, policies, architecture documentation, and automated security guardrails.Evaluate and address security risks associated with AI/ML and cloud-based applications.