Top Cyber Security Jobs in Kolkata

Leads cybersecurity data-source onboarding and integration for Zscaler’s security platform. Builds and automates Python/API-based data transformations, maps and normalizes security data, manages pipeline lifecycle activities, troubleshoots data quality, and identifies security gaps. Partners with cybersecurity SMEs and cross-functional teams to create implementation plans, communicate technical findings, and provide product improvement feedback. The role requires expertise in security platforms, diverse security-tool integrations, data modeling, SQL, and Python.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Leads the strategy, engineering, and security of a global remote-workspace platform spanning collaboration tools, productivity applications, zero-trust access, IAM, and AI agents. Oversees secure platform architecture, data protection, offensive security, vulnerability management, and incident response. Builds APIs and integrations, drives AI governance, sets organizational goals, and leads distributed engineering, product, and support organizations through managers.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Manage information security compliance and operational initiatives, including ISO 27001, SOC 2, and HIPAA programs; coordinate audits, evidence, policies, controls, risk remediation, vendor assessments, access reviews, vulnerability management, incident response, security awareness, and business continuity activities. Lead ambiguous technical initiatives through planning, stakeholder coordination, implementation, and completion while serving as a key contact for auditors and business partners.

Leads information security strategy, governance, and architecture for a business carve-out and Azure tenant separation. Establishes Azure security boundaries, IAM, Zero Trust, SOC operations, incident response, risk management, compliance frameworks, and security controls. Provides security oversight throughout migration and transformation activities, removes inherited dependencies, validates controls, and reports risks and compliance status to executive stakeholders.

Implement data governance, security, compliance, access control, policy enforcement, lineage, audit, privacy, and secure data-sharing capabilities across an enterprise platform. The role partners with technical and business teams, supports governance requirements, and provides expertise during platform implementation.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Architect and develop security platform services supporting secrets and key management, identity and access management, onchain security, policy and risk management, and vulnerability management. Define technical roadmaps, build scalable cloud systems using Go or Java, manage project deliverables, mentor engineers, review designs, and maintain backend systems. The role requires solving complex technical problems, ensuring security and operational integrity, and collaborating with engineering, product, design, and leadership teams.

Lead the end-to-end design, development, deployment, and operation of highly available backend services for endpoint data security. Establish architectural direction, improve reliability and observability, drive engineering standards, conduct code reviews, manage technical initiatives, and mentor engineers. The role requires extensive Golang experience, cloud scaling expertise, CI/CD knowledge, observability experience, and the ability to influence AI-assisted development practices.

Design, configure, enhance, and deploy SAP Security Cloud Applications. Troubleshoot complex security and application issues, manage application lifecycle processes, integrate enterprise systems, and lead optimization initiatives. Serve as a subject matter expert, collaborate across teams, make technical decisions, and mentor junior team members.

Provide hands-on Oracle ERP Cloud security consulting, including role creation and customization, job and duty roles, function and data security, Segregation of Duties, Risk Management Cloud, Advanced Access Controls, Advanced Financial Controls, and security-sensitive access analysis.

Responsible for designing and managing Oracle ERP security roles, administering user access, applying security controls and best practices, managing roles through Oracle RMC, and analyzing business requirements to develop appropriate security role structures.

Design and manage Oracle ERP security roles based on business requirements. The consultant will apply Oracle RMC knowledge, manage user access, implement security controls, and follow Oracle ERP security concepts and best practices.

Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.

Monitor, triage, and investigate cybersecurity alerts across SIEM, EDR, cloud, endpoint, network, and enterprise environments. Analyze logs, investigate suspicious activity, support incident response and remediation, coordinate escalations, improve detection quality, tune whitelists, and prepare technical reports. Maintain SOC documentation and contribute to operational improvements within a global 24/7 security operations centre.

Lead and execute offensive security assessments across web, mobile, thick-client, API, and network environments. Identify and validate vulnerabilities, simulate real-world attacks, perform risk assessments, manage vulnerability lifecycles, and deliver actionable reports. The role also includes improving security processes, managing engagement timelines, communicating with technical and executive audiences, and mentoring security professionals.

Performs manual white-box penetration testing, application security assessments, vulnerability hunting, and code reviews across Atlassian software, platforms, and services. Partners with security, engineering, and infrastructure teams to validate technical controls and strengthen security. The role requires understanding web application and cloud security, coding in Java, Python, or Go, leading projects, mentoring practitioners, and communicating with technical teams.

Designs and governs global Workday security architecture, including domain and business process policies, security groups, data segregation, masking, access provisioning, audits, compliance tracking, and release regression testing. The role protects sensitive employee and financial information across regions and supports SOC and GDPR controls.

Leads enterprise cybersecurity strategy, governance, budgets, incident response, compliance, risk communication, and executive security programs. Advises C-suite leaders and boards, oversees security roadmaps and vendor investments, directs crisis simulations and post-breach response, and mentors cybersecurity teams. The role requires extensive executive cybersecurity leadership, digital forensics expertise, advanced forensic tooling, and CISM, CISSP, GCFA, GCIH, or CCE certification.

Designs and governs secure multi-cloud architectures across AWS, Azure, and GCP. Responsibilities include zero-trust landing zones, IAM and RBAC, encryption and key management, container and Kubernetes security, CSPM and CWPP integration, policy-as-code automation, DevSecOps security testing, and incident-response readiness. The role requires extensive enterprise infrastructure security experience, cloud security architecture expertise, infrastructure-as-code knowledge, threat modeling skills, and a mandatory security certification.

Designs and integrates application security controls into CI/CD pipelines and DevSecOps frameworks. Responsibilities include managing SAST, DAST, and SCA tools; triaging vulnerabilities; leading threat modeling; securing containers and Kubernetes workloads; governing vulnerability dashboards and secret vaults; hardening infrastructure as code; and investigating application-layer security incidents.

Conduct network, web application, cloud, and red-team penetration tests; identify and exploit vulnerabilities; develop proof-of-concept scripts; assess cloud, API, container, Windows, Linux, and Active Directory security; document CVSS-rated findings and remediation plans; verify fixes; and support blue teams with threat and SIEM monitoring insights.

Own end-to-end security incident response during non-US hours, including alert triage, investigation, containment, remediation, root cause analysis, documentation, and escalation. Maintain SOC playbooks and runbooks, produce incident reports and metrics, improve tooling and automation, and coordinate handoffs with US-based security staff. Investigate events across SIEM, EDR, email, network, identity, and cloud platforms while serving as the primary security operations contact for India-based stakeholders.

Identify, triage, and remediate vulnerabilities in web applications and proprietary software. Refactor .NET/C# code, implement secure coding standards, conduct code reviews, support secure SDLC practices, and assess SAST, DAST, penetration testing, and bug bounty findings. Monitor emerging threats and OWASP Top 10 updates while supporting compliance with FERPA, COPPA, GDPR, UK GDPR, and other data protection standards. The role is fully remote but requires permanent residency in India and specified IST working hours.