2,941 Blockchain Security Specialist jobs in India

Entity:

Job Family Group:

Job Description:

You will work with

This team drives the response and management of cyber incidents, using an intelligence-led approach for identification, mitigation, and rapid response to safeguard bp on a global scale. By applying lessons learned and data analytics, they establish engineering principles and enhance the technology stack to continuously bolster bp's cybersecurity posture.

Let me tell you about the role

We are looking for Information Security Engineering Specialist (Application Security) who will be accountable for supporting the management of large security data sets, developing data-driven solutions and insights, and building data integration solutions and digital automation. We build digital solutions primarily in the cloud using Azure and AWS, so we can adapt quickly, demonstrate the latest technology, and scale our solutions globally.

You will advocate that application development, platform development, and infrastructure teams adhere to secure design and development practices (e.g., threat modeling, technical design review, resilience testing, monitoring & alerting, code review, and documentation)

You will also contribute to standard processes that will help shape bp’s security agenda and create a culture of excellence.

What you will deliver

• Provide technical expertise in support of information security and risk activities specific to the specialism to achieve objectives e.g. designing and developing security solutions to work across bp’s digital environments that are consistent with current policies.
• Maintain and improve the security aspects of the SDLC to help software engineering teams create products secure by design.
• Develop and promote guidelines for secure API and cloud-native applications.
• Maintain systems that are designed to uncover code vulnerabilities and provide remediation insights.
• Integrate security processes, such threat modeling, static/dynamic analyses, and code reviews
• Deliver the implementation and application of relevant operating processes and procedures, and ensure all activities adhere to the relevant standards.
• Evolve the security roadmap to meet anticipated future requirements and needs.
• Create and articulate materials on how to embed and measure security throughout the software and platform development lifecycle.
• Develop and maintain a series of internal and external collaborator relationships, delivering advanced technical knowledge to support project delivery, cooperatively identify key challenges and ensure that security solutions successfully protect bp against cyber risks.

What you will need to be successful (experience and qualifications)

• Experienced security professional with over 5 years of full stack development combined with delivering security engineering services or developing security solutions in complex organizational environments.

• Strong communication abilities, with a comprehensive understanding of both developer and executive experiences
• Should be capable of performing manual code audit, identify and fixing application vulnerabilities.
• Should be proficient in two or more object-oriented programming languages (e.g., Java, JavaScript, Python etc.)
• Should be capable of deploying the application to the cloud native resources.
• Should be capable of securing applications deployed to VMs and Containers.
• Firm foundation of information and cyber security principles and standard processes.
• Solid knowledge in application security concepts (OWASP Top 10, secure coding best practices, common vulnerabilities, etc.)

• Must possess a proven track record as a solution architect.

• Demonstrated practical experience in threat modeling strategies, including at least two of the following approaches: software-centric, attacker-centric, asset-centric, or risk-centric threat modeling.
• Should be able to demonstrate proficiency in both STRIDE and PASTA methodologies.
• Proficient with code scanning tools and should be proficient in fine tuning the result controllers
• Practical Experience in code scanning tools (SAST, DAST, SCA) and integrating multiple vulnerability detection tools provide a unified developer experience.
• To achieve onboarding, false positive detection, reporting and metrics.
• Experience with CI/CD pipelines and DevSecOps tools to automate security checks and integrate them into the development workflow.
• Must demonstrate proficiency in developing secure open-source strategies for the organization.

• Must possess the ability to address open-source risks, including security, licensing, and operational concerns.

• Operational proficiency in frameworks such as CIS CSC, NIST CSF, NIST 800-53, ISO 27001, etc.
• Professional and technical security certifications such as CISSP, CISM, GEVA, CEH, OSCP or equivalent are a plus.
• Usage of AI to secure application is a plus
• Foundational knowledge of security standards, industry laws, and regulations such as Payment Card Industry Data Security Standards (PCI-DSS), General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and Sarbanes-Oxley (SOX)
• Continuous learning and improvement approach.

Travel Requirement

Relocation Assistance:

Remote Type:

Skills:

Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp’s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please  contact us .

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.

Location

The successful candidate shall be placed at Pune Location. It is a Full-time Job, “No” remote work. Information Security Officer/Associate willing to work on a 12-month contract/full-time may apply.

Experience

Candidates should have experience between 4-6 years

Role Description

We’re Hiring: Information Security Officer/Associate

We are looking for people who are passionate about making data safer, secure, and accessible through appropriate systems, processes, and rules. Information Protection is the key function and additional data security sub-functions (like data discovery, classification, and protection), we would require a specialist like you to support with the below high-level responsibilities, amongst others.

Responsibilities

• Data Discovery and Classification(DDC): Design Data Discovery Processes, Develop comprehensive Data Lifecycle Management processes to identify, classify, and protect sensitive data across the organization.
• Create Standard Operating Procedures (SOPs): Draft and implement templatized SOPs for data analysis, ensuring consistency and focus on risk reduction.
• Automate Processes: Identify and coordinate automation opportunities within Data Discovery to improve efficiency and accuracy.
• Data Protection (DP) – DLP + CASB + Insider Threat Management: Perform detailed analysis of DLP incidents to identify policy violations, insider threats, or data exfiltration attempts. Investigate CASB alerts, Triage and categorize incidents by severity, business impact, and risk
• Reporting: Provide detailed reports to management stakeholders, highlighting the addressed risks, process improvements, and actionable insights
• Work closely with teams like IT Security Team, Cloud Centre of Excellence (CCoE), IT Help Desk, IP Management and IT GRC etc to develop systems & SOPs

Requirements

• Hands-on experience with Sentinel
• Proven experience in Data Security domain
• Training in any of SC 200 / SC 400/ CompTia Security+ / CEH
• Zscaler EDU 220/ Zscaler EDU -22/ Microsoft Ninja for Cloud Apps
• BigID Fundamentals / BigID Security Professional
• Proficiency in general system troubleshooting for Windows and MAC
• Configure advanced auditing and reporting capabilities to monitor compliance adherence.
• Ensure secure data governance across on-premises, cloud, and hybrid environments

About Us

Terra TCC is a Technology & Sustainability company offering services in Software, Environmental consulting, and Staff Augmentation to top-notch clients. We continuously strive to help companies find the right technology, the right services and the right talent for their needs. Learn more at

Any information that is shared with us, shall be retained as per company's data privacy policy. In case you wish to revise, modify or delete any of the submitted information, please write back to us. See contact details on

Join Verdantas – A Top #ENR 81 Firm,

We at Verdantas are seeking a highly motivated and detail-oriented Information Security Analyst, to protect our company’s critical systems and sensitive data. You will be an integral part of our security team, responsible for implementing, maintaining, and monitoring our security posture. The ideal candidate will have a strong technical background, a proactive mindset, and a passion for staying ahead of the latest security trends and threats.

Key Responsibilities

Security Operations & Monitoring:

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and other security tools to identify and investigate potential security incidents.
• Perform vulnerability scans and assessments, prioritizing and tracking remediation efforts.
• Manage and configure security tools, including EDR/XDR, antivirus, and email security gateways.
• Conduct log analysis and forensic investigations to determine the root cause of security events.

Incident Response:

• Serve as a key member of the incident response team.
• Respond to and mitigate security incidents in a timely and effective manner.
• Document incidents and develop runbooks for future reference.

Security Architecture & Engineering:

• Design, implement, and maintain security controls and technologies to protect cloud (e.g., AWS, Azure, GCP) and on-premises infrastructure.
• Implement and manage identity and access management (IAM) policies and practices.
• Harden systems, networks, and applications based on industry best practices (e.g., CIS Benchmarks).
• Assist in the development and enforcement of security policies, standards, and procedures.

Governance, Risk, and Compliance (GRC):

• Participate in risk assessments and audits (e.g., SOC 2, ISO 27001, PCI-DSS, HIPAA).
• Assist in third-party security risk assessments.
• Promote security awareness across the organization through training and communication.

Required Qualifications & Skills

• Bachelor’s degree in computer science, Information Security, or a related field, or equivalent experience.
• (8+) years of experience in an information security role.
• Hands-on experience with core security technologies (SIEM, EDR, Firewalls, IDS/IPS, DLP).
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP/S) and network security.
• Knowledge of operating systems (Windows, Linux, macOS) and their security aspects.
• Familiarity with cloud security principles (AWS, Azure, or GCP).
• Understanding of common attack vectors, malware, and threat actor tactics (e.g., MITRE ATT&CK framework).
• Excellent problem-solving and analytical skills.
• Strong written and verbal communication skills.

Preferred Qualifications & Skills

• Relevant industry certifications such as:
• Entry-Level: Security+, GIAC GSEC
• Mid-Level: CISSP, CISM, CEH, CompTIA CySA+
• Cloud-Specific: CCSP, AWS Certified Security - Specialty, Azure Security Engineer Associate
• Experience with scripting languages (e.g., Python, PowerShell, Bash) for automation.
• Knowledge of application security (SAST, DAST) and secure SDLC practices.
• Experience with penetration testing or red teaming tools and methodologies.
• Prior experience in a regulated industry (finance, healthcare, etc.)

The Information Security Consultant will be responsible for the implementation, assessment, and management of ISO 27001:2022, ISO 27002, and SOC 2 standards for clients. This role involves working independently or alongside senior consultants to help clients achieve and maintain information security compliance and other best practices. The consultant will focus on assessing and ensuring compliance with key security frameworks and will provide vCISO support to various clients.

Key Responsibilities:

ISO 27001/27002 Compliance:

• Assist clients in achieving ISO 27001 certification by identifying and implementing the appropriate controls within the audit scope.
• Verify compliance with ISO 27001/27002 controls and provide recommendations for improvement.

SOC 2 Compliance:

• Assist clients in achieving SOC 2 compliance by identifying and implementing the appropriate Trust Service Criteria (TSCs).
• Conduct SOC 2 compliance assessments and ensure the proper implementation of required controls.

Risk Assessment and Mitigation:

• Conduct risk assessments of business activities, collaborating with stakeholders to manage risks until closure or acceptance.
• Provide actionable recommendations to mitigate identified risks.

Policy and Procedure Development:

• Define, develop, and review information security policies, procedures, guidelines, forms, and templates in line with best practices.
• Ensure documentation is up-to-date and aligned with industry standards.

Baseline Standards Review:

• Create and review baseline standards for operating systems, databases, web servers, and applications.
• Recommend improvements based on security assessments.

Post-Implementation Audits:

• Support post-implementation audits for ISO 27001:2022 to ensure ongoing compliance.
• Monitor and assess adherence to established information security standards.

Information Security Awareness:

• Create and execute organizational information security awareness programs.
• Conduct training sessions to ensure employees are knowledgeable about security best practices.

Security Standards Compliance:

• Assist clients in ensuring compliance with various security standards (ISO 27001, SOC 2, HIPAA, NIST, CIS, PCI DSS, etc.).
• Recommend strategies to ensure long-term adherence to security best practices.

Incident Response:

• Develop and implement incident response plans to handle security breaches and cyberattacks.
• Ensure that clients have clear, actionable plans to address potential security incidents.

Gap Assessment:

• Conduct gap assessments to identify areas of non-compliance and provide remediation strategies.

vCISO Support:

• Provide virtual Chief Information Security Officer (vCISO) support to clients, advising on information security strategy and governance.

Skills and Qualifications:

Technical Skills:

• Strong background in Information Technology and/or Cybersecurity .
• Proficiency in auditing, policy development, database security, firewall design, risk analysis, identity management, access control, and web security.
• Knowledge of security frameworks including ISO 27001, SOC 2, HIPAA, NIST, CIS, PCI DSS, and other industry best practices.
• Hands-on experience with ISO 27001:2022 and SOC 2 implementations and assessments.
• Strong understanding of risk management and the ability to assess and mitigate security risks.

Presales and Communication Skills:

• Excellent client-facing communication skills.
• Strong problem-solving abilities and the capacity to work effectively in a team environment.
• Ability to communicate complex technical concepts to both technical and non-technical audiences.
• Demonstrated ability to deliver presentations and conduct training sessions.

Operational security automation is the process of automating some or all aspects of SOC or VOC operations. Replacing manual workflows with automated ones.

A fundamental building block of automation is the security playbook. A playbook defines a workflow by outlining the steps teams will take to handle different types of security alerts or events. By developing playbooks ahead of time, teams avoid having to make a response plan every time an alert or event occurs.

Responsibilities:

• Scripting and workflow development, follow proper engineering and integration lifecycles (design, create, test, document, integrate, monitor, maintain) and are designed to be reusable. Creating and integrating APIs to create orchestrated workflows.
• Autonomously plan security automation daily operations to ensure targets are being met.
• Identify and recommend necessary changes to the operational security teams to ensure automation and orchestration, maximize team talent and reduce routine tasks.
• Ensure operational security automations meet business and technical requirements, are maintainable, scalable and meet performance standards
• Bring external perspective and ideas from relevant sources, keep current with technology and industry best practices of the security industry threat landscape
• Communicate technical and functional requirements using an effective, efficient, and creative approach with a high degree of collaboration and influence.
• Work with in-house teams to identify the right mix of tools, techniques, and procedures to translate our needs and future goals into a plan that will enable secure and effective solutions.

Required Skills:

• 10+years of experience working in Information Security with focus in operational security.
• Experience with agile project management processes and methodologies
• Mandatory 3 years experiences with one of the following SOAR vendor platforms (Tines, Swimlane)
• Being autonomous.
• Advanced research, analytical, and problem-solving skills
• Masters degree in Computer Science, Information Security, or related field