9,311 Cissp jobs in India

About The Role
This leadership role combines deep technical expertise with a strong security mindset to ensure high availability, scalability, and security across our cloud-based environments.

Infrastructure & DevOps

• Design, implement, and maintain secure, scalable cloud infrastructure (AWS, Azure, or GCP).
• Lead the development and optimization of CI/CD pipelines to enable rapid and reliable deployments.
• Manage Infrastructure as Code (IaC) using tools like Terraform or CloudFormation.
• Monitor infrastructure performance, cost, and availability to ensure 99.9%+ uptime.
• Mentor and support DevOps engineers, cultivating a culture of automation and operational excellence.

Security Leadership

• Develop and enforce security policies, standards, and procedures across infrastructure and applications.
• Conduct regular vulnerability assessments, penetration tests, and security audits.
• Manage IAM, secrets management, network segmentation, and secure configurations.
• Ensure compliance with regulatory frameworks (e.g., ISO 27001, SOC 2, GDPR).
• Lead incident detection, response, root cause analysis, and remediation.

Collaboration & Governance

• Work closely with development, QA, and product teams to embed security throughout the SDLC (DevSecOps).
• Partner with compliance and risk teams to achieve audit and certification objectives.
• Maintain comprehensive and up-to-date documentation of infrastructure, policies, and incident response procedures.

Qualifications

• 712 years of experience in DevOps, Security Engineering, or related fields, with 3+ years in a leadership role.
• Deep expertise in one or more cloud platforms (AWS, Azure, GCP).
• Hands-on experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, etc.).
• Strong background in infrastructure security, including IAM, WAFs, and secrets management.
• Proficiency with IaC tools (Terraform, CloudFormation).
• Solid scripting skills in Python, Bash, or Go.
• Strong understanding of networking, encryption, authentication, and secure system design.

Required Skills

• Deep expertise in one or more cloud platforms (AWS, Azure, GCP).
• Hands-on experience with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, Azure DevOps, etc.).
• Strong background in infrastructure security, including IAM, WAFs, and secrets management.
• Proficiency with IaC tools (Terraform, CloudFormation).
• Solid scripting skills in Python, Bash, or Go.
• Strong understanding of networking, encryption, authentication, and secure system design.

Preferred Skills

• Relevant certifications such as AWS DevOps Engineer, CKA, CISSP, CISM, or CEH.
• Experience with zero-trust security models and architectures.
• Familiarity with container and Kubernetes security best practices.
• Exposure to security automation tools like Snyk, Trivy, Aqua Security.

)

Job Summery

As the Information Security Associate within the Business Security Operations (BusSecOps) team, you will be responsible for implementing and maintaining information & cyber security practices across WTW.

Candidate would be required to gain a high-level of knowledge and understanding of critical technology applications and security standards. You will need to take a leadership role in building security testing framework for web-based applications which includes Threat Profiling, DAST, SAST, Security Architecture, and Penetration testing. In this role, you are expected to understand the organizations information & cyber security strategy and standards while working collaboratively with technology teams to implement and maintain sound security practices.

This role resides in our Information & Cyber Security (ICS) team within Corporate IT.

Role & responsibilities

• Build and maintain effective relationship with technology teams and ICS stakeholders

• Foster a culture of information and cyber security best practices though awareness and support

• Stay up to date with the latest application security developments and security trends to continually improve internal processes

• Hold good understanding of Application & Infrastructure testing methodology & support development teams in the remediation of vulnerabilities

• Work with development teams to improve the secure software development lifecycle

• Engage in information security activities to support client/business engagements i.e., incidents, vulnerabilities, development lifecycles, risk management and emerging threats

• Ability to coordinate and execute security testing for applications and cloud environments

• Engage with key stakeholders to support internal and external audit activities to ensure compliance with regulations such as: SOC, FCA, NYDFS, GDPR, HIPAA

• Demonstrate a good understanding of security regulations and data privacy laws

• Support the risk identification & exceptions management process

• Manage and oversee adhoc projects related to maturing information and cyber security controls across the organization

Preferred candidate profile

• Degree in a relevant Information Technology area preferably with a focus on information security
• Significant experience in managing and patching vulnerabilities across a host of assets
• Expert understanding of all aspects of information security principles, policy and its application in business and technology areas
• Understanding of core cloud security principles
• Knowledge and experience on supporting information security audits
• Client focus: ability to engage positively with WTW clients and business stakeholders.
• Information Security specific certification is desirable (such as CISM, CISSP, CISA, CEH)

Role : Information Security Engineer Golang
Overview
The Information Security Engineer will be responsible for the automation and delivery of network security within global public cloud initiatives.

This role is critical in ensuring secure, scalable, and automated deployments across AWS and GCP environments, with a strong emphasis on Terraform and Golang-based automation.

Responsibilities

• Collaborate with cloud and networking stakeholders to define requirements for complex enterprise cloud environments.
• Provide expertise and guidance on cloud and network security across IaaS, PaaS, and cloud-native application architectures.
• Partner with enterprise architects and subject matter experts (SMEs) to deliver complete and secure architecture solutions.
• Lead cloud network security initiatives by designing, developing, and deploying scalable Terraform modules.
• Build automation workflows and tools using Terraform and Golang to improve deployment efficiency and consistency.
• Identify and implement opportunities for automating network security configurations and deployments.
• Continuously monitor, optimize, and improve reusable patterns, modules, and security practices.
• Design, develop, and manage Terraform modules for implementing and maintaining cloud security policies across multiple environments.
• Configure and manage Policy Enforcement Points (PEPs) to ensure compliance with organizational and regulatory security standards.
• Implement and optimize Network Security Groups (NSGs), Security Groups (SGs), and other cloud-native security controls across AWS, Azure, and GCP.
• Collaborate with DevOps and Cloud Engineering teams to integrate security best practices into Infrastructure as Code (IaC) workflows.

Minimum Qualifications

• 7+ years of experience in data center, cloud, and networking.
• 5+ years of hands-on experience in AWS and GCP cloud environments.
• 3+ years of experience with containers, Kubernetes, and microservices.
• 3+ years of proven experience in Terraform (module design and delivery).
• Strong hands-on experience in Golang for automation and tooling development.
• 3+ years of expertise in advanced networking within public cloud.
• Strong knowledge of classical and cloud-native design patterns.
• Familiarity with security configuration management, container security, endpoint security, and secrets management in cloud applications.
• Knowledge of network architecture, proxy infrastructure, and secure network access enablement.

)

Information Security Engineer - Network Security Engineer, CISSP, CISM, CCNA Security

*Meet the Team *

Cisco InfoSec seeks an Information Security Engineer to join some of the industry''s brightest minds in Network Security, managing access decisions based on Cisco''s security policies, assessment of security risks at various PINs in one of the world''s largest networks. In this role, you will gain insight on the detailed functionality of how security is handled at various network layers, through administrative, technical and physical controls. The ideal applicant will have professional understanding of Network Security, Cloud Security, Vulnerability Management, and Security Incident Detection and Response. The candidate should be able to comprehend business requirements, assess and communicate relevant risks, and implement suitable controls in accordance with policies, standards, and guidelines.

*Your Impact *

As part of the global infosec organization, this role''s responsibilities include establishing and preserving relationships with internal business clients, IT, and engineering management worldwide. In addition, the candidate will oversee projects, collaborate with different functional units within the security organization, and find areas of continuous improvement to improve operational efficiency. As part of a global organization primarily based out of the US, the candidate may be expected to work outside of normal business hours on a weekly basis.

• Evaluate diverse security risks in a fast-moving environment and be technically capable of suggesting and carrying out remediation, in accordance with Cisco''s security policies and standards.
• Possess Foundational knowledge in one or more security domains, including network security, cloud security, server security, and identity/access management.
• Have experience implementing and maintaining security solutions in an enterprise environment.
• Possess a validated foundation of Secure Development Lifecycle (SDL) and a working knowledge of various SDL requirements.
• Be familiar with Agile methodologies and CI/CD, as well as relevant expertise in all phases of application development across technology stacks.
• Possess a solid grasp of security vulnerabilities and remediation documented by organizations like OWASP, NIST, SANS, etc.
• Demonstrate good communication skills and can articulate application vulnerabilities, defects, technical controls, risks, and other complex security matters with non-technical collaborators.
• Be able to understand complex architectures, make security decisions to enable business and help our customers understand any risks involved.
• Have innovative thinking, analytical reasoning, and creative problem-solving abilities.
• Act strategically, diligent, highly motivated, and eager to make a major contribution to making Cisco more secure.

*Minimum Qualifications *

• Strong knowledge of Data Center, Virtualization, Cloud, Multi-tier deployment environments and their security operations.
• Strong knowledge in Networking & Security preferably evidenced through certifications and hands-on experience in assessing security risks for large enterprise networks.
• Systems administration skills with an information security background (Good understanding of Unix and windows environment).

*Preferred Qualifications *

• Typically requires a bachelors degree in computer science or work equivalent of 5+ or more years of experience.
• Prior experience in information security consulting with the understanding of how to analyze InfoSec policies.
• Preferred certification(s) CISSP/CISM/CCNA/CCNA Security/CCNP.

About this role:

Wells Fargo is seeking an Information Security Engineer.

In this role, you will:

• Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards
• Track or remediate vulnerabilities and security issues
• Review and correlate security logs
• Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Provide technical support for security related issues
• Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
• Interface with more experienced technologists

Required Qualifications:

• 2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Posting End Date:

15 Sep 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

Profile description

We are seeking an Information Security Professional to join our team. The successful candidate will be responsible for monitoring, detecting, and analyzing security incidents, as well as performing risk assessments, implementing security measures, and ensuring compliance with ISO 27001/ ISO 22301 standards.

Job description

KEY SKILLS AND CAPABILITIES

• Monitor and analyze security events and incidents using Security Information and Event Management (SIEM) tools.
• Enhance and build cyber threat detection use cases, tuning for accuracy and reducing false positives.
• Investigate and respond to security incidents, performing root cause analysis and recommending preventive measures.
• Monitor 3rd-party/vendor risk alerts and provide remediation recommendations.
• Support vulnerability and patch management programs, tracking remediation progress and effectiveness.
• Work with IT/OT teams to implement security solutions and controls, ensuring alignment with best practices.
• Stay updated on the latest cyber threats, vulnerabilities, and attack techniques to improve defence capabilities.
• Provide timely reports and updates to management on incidents, detection trends, and security posture.
• Act as a local point of contact for all operational security escalations.

PROFESSIONAL EXPERIENCE AND EDUCATION

• Bachelors degree in Computer Science, Information Technology, or related field.
• 1-3 years of experience in security operations, incident monitoring/response, and SIEM platforms.
• Knowledge of frameworks such as MITRE ATT&CK, NIST CSF, and CIS controls.
• Hands-on experience with vulnerability assessment tools, EDR/XDR, firewalls, and penetration testing.
• Analytical skills with strong attention to detail in identifying patterns, anomalies, and threats.
• Effective communication and collaboration skills for cross-team incident handling.
• Industry certifications (Security+, CEH, SOC Analyst, etc.) are desirable but not mandatory.

Information Security Engineers

Date: Monday, 7th July 2025

Location for Interview: Bangalore

Work Mode: Work From Home (5 Days a Week)

Role: Information Security Engineer

Experience: 6 to 9 years

Required Skill Set:

• Strong programming skills in Python, Perl, and Java
• Hands-on experience with cloud platforms (AWS, Azure, or GCP)
• Solid understanding of cloud security, automation, and secure coding practices
• Exposure to network security, vulnerability management, and incident response
• Ability to design, develop, and integrate security tools and systems

Eligibility:

• 6+ years of relevant experience in information security engineering
• Available for Face-to-Face (F2F) interview on Monday, 7th July 2025
• Open to working remotely (full-time WFH 5 days/week)Role & responsibilities

Skills required:  Good experience in VAPT , Web application testing, mobile application testing including IOS & Android

At Trackier, we're building SaaS (software as a service) products that are used in more than 20+ countries across the world. Over the last 9 years, Trackier has helped create industry standards in Performance Marketing and Mobile Marketing products and have helped brands grow their website conversions through partners by our suite of products across Performance, eCommerce, Mobile.

Trackier is Customisable Performance Marketing Software used by Ad Networks, Agencies and Advertisers to manage publisher relations. The Trackier Performance Marketing Platform enables you to create, automate, measure, and optimize all of your marketing Campaigns, Publishers, and advertisers, creatives and conversions in one place.

What You'll Do
Security Governance & Compliance

• Define and maintain security policies, standards, and procedures across the organization
• Lead Trackier's efforts toward compliance with SOC2, GDPR, and other standards
• Conduct risk assessments, internal audits, and gap analysis to ensure readiness for client and regulatory requirements
• Manage identity and access controls, ensuring principle of least privilege and secure onboarding/offboarding
• Coordinate and prepare for third-party security assessments and certifications.

Security Operations

• Implement and manage tools for monitoring, logging, and alerting to detect potential threats
• Lead incident response, investigation, and post-mortem processes
• Ensure data protection and privacy policies are enforced across teams and products
• Review and approve vendor security practices and third-party integrations

Collaboration & Awareness

• Work closely with DevOps and Engineering to ensure security considerations are applied consistently
• Conduct security training and awareness programs for employees
• Act as the primary security point of contact for internal teams, clients, and auditors.

Requirements

• Experience: 4+ years of professional experience in Information Security, Security Engineering, or related fields
• Compliance Expertise: Knowledge of ISO 27001, SOC2, GDPR, and related frameworks
• Risk & Audit: Hands-on experience with risk assessments, internal audits, and compliance documentation
• Security Tools: Familiarity with SIEM, IDS/IPS, vulnerability scanners, and endpoint protection tools
• Cloud Security Awareness: Understanding of securing environments on GCP/AWS/Azure and SaaS applications
• Incident Response: Experience managing and responding to security incidents
• Policies & Governance: Strong background in writing, implementing, and maintaining org-wide security policies
• Soft Skills: Excellent communication and stakeholder management skills; ability to collaborate with tech and non-tech teams.

Nice to Have

• Experience with privacy laws (e.g., CCPA, HIPAA) and data protection regulations
• Prior involvement in achieving or maintaining ISO/SOC2 certifications for a SaaS company
• Security certifications (e.g., CISSP, CISM, ISO 27001 LA/LI, CompTIA Security+).

Benefits

• Medical Insurance
• 5 days working culture
• Best in industry salary structure
• Lucrative reimbursement policy