Top Cyber Security Jobs in Kolkata

The posting provides minimal detail and states that the role joins the Payroll team as a Senior Payroll Analyst. The title indicates an L2 SOC Security Engineer position focused on SIEM, SOAR, and UEBA technologies, but specific responsibilities are not provided.

Product Security Engineer partnering with engineering and product teams to embed security into software development. Responsibilities include threat modeling, secure code review, automated security testing, security tooling, secure-by-default libraries, vulnerability reduction, and cross-functional project leadership. The role also supports Bugcrowd’s bug bounty program and may secure cloud-native platforms and infrastructure-as-code environments.

Secures on-premises data center infrastructure, primarily VMware vSphere, vCenter, ESXi, virtual machines, and supporting identity, network, storage, backup, and logging services. Responsibilities include security engineering, hardening, access control, vulnerability remediation, SIEM integration, threat detection, incident response, migration security, recovery validation, compliance evidence, documentation, and cross-team security guidance.

Secures VMware and on-premises data center infrastructure through hardened configurations, vulnerability remediation, privileged-access controls, monitoring, detection engineering, incident response, and migration assurance. The role integrates infrastructure telemetry with SIEM platforms, validates backup and recovery controls, supports audits and risk assessments, develops security standards and automation, and coordinates remediation across security, infrastructure, engineering, compliance, and IT teams.

Security and Compliance Engineer responsible for application, cloud, AI, data, and infrastructure security in a healthcare environment. Duties include penetration testing, vulnerability remediation, DevSecOps integration, cloud security posture management, compliance initiatives for HIPAA, SOC 2, and HITRUST, threat modeling, secure code and architecture reviews, email and bot protection, AI security, incident response, data protection, audit support, and security documentation.

Develop and manage cloud and machine identity security across AWS, Azure, Kubernetes, APIs, and hybrid environments. The role focuses on secrets management, identity governance, authentication patterns, secure automation, and credential rotation. Responsibilities include developing automation scripts for secrets rotation and injection, integrating secrets platforms with cloud services, container orchestration, and microservices, and managing machine identity lifecycles using HashiCorp Vault, Azure Key Vault, and AWS Secrets Manager.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Designs and maintains scalable cybersecurity automation components, integrations, connectors, and playbooks for SOC workflows, incident response, threat investigation, and alert triage. Integrates SIEM, SOAR, EDR, vulnerability management, and threat intelligence platforms. Develops AI- and LLM-powered security workflows, converts customer requirements and proof-of-concepts into production solutions, and applies software engineering practices including testing, documentation, version control, and performance optimization.

Perform penetration tests and SAST/DAST on web, mobile, and network systems; scope and report findings; integrate security into CI/CD and SDLC; collaborate with teams to remediate vulnerabilities and deliver secure coding training.

Leads regional growth of RSA Professional Services and Identity Security solutions. Advises executives and security leaders, develops IAM and IGA strategies, leads discovery workshops, shapes statements of work, supports strategic enterprise sales, and drives services bookings, attach rates, adoption, and customer outcomes. Serves as a thought leader across identity governance, authentication modernization, compliance, lifecycle management, and Zero Trust initiatives.

Curate, triage, validate, and assess vulnerability submissions for managed bug bounty programs. Evaluate validity, accuracy, severity, and OWASP Top Ten vulnerabilities; communicate with clients and security researchers; escalate critical findings through incident response; and contribute to scripting, development, or tooling that improves the triage and validation process.

Supports enterprise cybersecurity operations, security engineering, incident investigations, security control deployment, compliance initiatives, monitoring, and risk reduction. The role assists with endpoint, identity, email, cloud, and application security, analyzes logs and forensic artifacts, supports tabletop exercises, and collaborates with infrastructure, service desk, cloud, engineering, and Fortive teams.

Conduct supplier and third-party security assessments, review controls and audit evidence, identify risks and gaps, recommend remediation, and monitor treatment plans throughout supplier lifecycles. Maintain risk records and metrics, support governance, audits, compliance initiatives, and executive reporting. Collaborate with procurement, legal, privacy, audit, business owners, suppliers, and security teams while improving third-party risk processes and promoting security best practices.

Own security and compliance for finance and digital platforms. Implement KYC/AML, audit logging, encryption, and compliance controls. Coordinate external VAPT vendors and auditors. Define security policies for mobile and backend systems to meet SEBI/IRDAI, PCI-DSS, and GDPR standards.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Designs and reviews security architecture, performs threat modeling and cloud assessments, responds to incidents, manages security tools, and advises engineering teams on secure development. Conducts code and vulnerability reviews using OWASP and MITRE ATLAS, evaluates AI and LLM security risks, and supports security monitoring, risk assessment, data protection, and compliance across applications, infrastructure, and endpoints.

Provides 24/7 global client support for enterprise network security environments. Configures, manages, and troubleshoots Cisco FMC/FTD firewalls, VPNs, security policies, IDS/IPS, certificates, LAN/WAN infrastructure, routing and switching, and SD-WAN. Handles security incidents, escalated P1/P2 technical calls, risk remediation, and critical network issues while communicating directly with clients. Supports multi-vendor environments including Cisco and Arista.

Own product security end to end, including vulnerability identification and remediation, secure SDLC practices, SOC 2 compliance, incident response, access controls, data protection, security tooling, vendor assessments, and audit readiness. Partner directly with engineering teams, review production code, strengthen security culture, communicate risk to leadership and external stakeholders, and support evolving compliance requirements such as ISO 27001.

Own the GRC engineering program by building continuous control monitoring, common controls frameworks, automated evidence collection, control validation, risk workflows, asset prioritization, and audit-ready reporting. The role integrates identity, cloud, code repositories, endpoints, and ticketing systems; develops policy and control checks in code; guides AI-assisted compliance workflows; tracks program metrics; and represents the technical implementation during audits.

Own cloud and infrastructure security architecture across Azure and AWS, including network segmentation, workload isolation, hardened images, Kubernetes, policy as code, AI workload security, and vulnerability management. Build secure-by-default infrastructure modules, landing zones, and automated evidence processes. Establish cloud posture and workload protection practices, drive remediation through pull requests, and ensure controls satisfy ISO 27001, SOC 2, and future regulatory requirements.

Lead application security across One Identity’s products by threat modeling designs, defining security requirements, reviewing and fixing code, tuning security testing tools, managing vulnerability response and coordinated disclosure, overseeing SBOM and software composition analysis, and advising engineering on AI-assisted development. The role requires deep C#/.NET expertise, Java fluency, product security experience, and the ability to embed practical security controls throughout the software development lifecycle.

Defines enterprise security architecture strategy and standards across Nokia, leading complex initiatives involving Zero Trust, IAM, multi-cloud security, application and network segmentation, AI security, and cyber resiliency. Advises senior stakeholders on security strategy, supplier risk, M&A due diligence, and regulatory matters. Assesses vulnerabilities, validates security solutions, supports penetration testing and hardening, and delivers automated security capabilities across cloud-first infrastructure and DevSecOps environments.

Own platform architecture, infrastructure security, access controls, database maturity, and AWS migration. Write secure production code, establish infrastructure standards, review security changes, partner with InfoSec, mentor engineers, troubleshoot recurring failures, and guide DevOps implementation. The role also supports AI infrastructure, model serving, agent observability, React and TypeScript applications, and infrastructure security on-call responsibilities.

Owns the enterprise DLP program, secures Azure and AWS environments, and leads high-severity security incident response outside US hours. Responsibilities include DLP policy design and tuning, cloud security assessments, remediation, identity and workload hardening, alert escalation, MSSP integration, L2 team enablement, automation playbooks, audit support, and security metrics reporting. The role requires collaboration with Legal, IT, business stakeholders, and global security teams while maintaining ISO 27001 and privacy compliance.