572 Cybersecurity jobs in Mumbai

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• 3+ years of experience in cybersecurity, with a focus on threat intelligence, incident analysis, or security operations.
• Demonstrated ability to gather, analyze, and interpret threat intelligence from multiple sources.
• Strong understanding of cyberattack frameworks (e.g., MITRE ATT&CK), malware analysis, and network security concepts.
• Proficiency in threat intelligence platforms and security information and event management (SIEM) tools is a plus.
• Excellent written and verbal communication skills, with the ability to present complex information clearly.
• Ability to work independently and manage time effectively in a remote setting.

• Monitor, collect, and analyze threat intelligence from various sources, including open-source intelligence (OSINT), dark web, technical feeds, and government advisories.
• Develop and maintain threat actor profiles, TTPs (Tactics, Techniques, and Procedures), and indicators of compromise (IOCs).
• Conduct in-depth analysis of emerging threats, vulnerabilities, and attack vectors relevant to our industry and infrastructure.
• Produce clear, concise, and actionable threat intelligence reports for technical and non-technical stakeholders.
• Develop and implement threat hunting methodologies to proactively identify potential security breaches.
• Collaborate with incident response teams to provide timely and relevant intelligence during security incidents.
• Evaluate and recommend new threat intelligence tools and technologies.
• Contribute to the development and refinement of security policies and procedures based on intelligence findings.
• Build and maintain relationships with external threat intelligence communities and information-sharing groups.
• Provide expertise and guidance on cybersecurity threats and mitigation strategies to internal teams.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. Relevant certifications such as GIAC Certified Incident Handler (GCIH), GIAC Certified Threat Intelligence (GCTI), or CISSP are highly valued.
• Minimum of 5-8 years of experience in cybersecurity, with a strong focus on threat intelligence, incident response, or security operations center (SOC) analysis.
• Proficiency in using threat intelligence platforms (TIPs), SIEM tools, and various security analysis tools.
• Deep understanding of various threat landscapes, cybercrime tactics, and nation-state actor methodologies.
• Experience with scripting languages (e.g., Python, PowerShell) for data analysis and automation is a plus.
• Familiarity with network protocols, operating systems, and common exploitation techniques.
• Excellent analytical, research, and problem-solving skills.
• Strong written and verbal communication skills, with the ability to articulate complex technical concepts effectively.
• Ability to work independently and manage multiple priorities in a remote environment.
• Demonstrated ability to think critically and anticipate potential threats.

• Monitor, collect, and analyze threat intelligence from various sources, including open-source intelligence (OSINT), dark web, industry feeds, and internal telemetry.
• Develop and maintain comprehensive threat actor profiles, including their motivations, capabilities, and TTPs.
• Produce timely and actionable threat intelligence reports, briefings, and alerts for various stakeholders, including security operations, incident response, and executive leadership.
• Identify emerging threats, vulnerabilities, and attack vectors relevant to our organization and industry.
• Develop and refine threat hunting methodologies based on intelligence gathered.
• Collaborate with incident response teams to provide context and support during security incidents.
• Contribute to the development and enhancement of security tools and platforms used for threat intelligence collection and analysis.
• Stay current with the global threat landscape, geopolitical events, and advanced persistent threats (APTs).
• Conduct research on new malware, exploits, and attack techniques.
• Build and maintain relationships with external threat intelligence communities and information sharing groups.
• Provide expert advice on defensive strategies and security control recommendations based on intelligence.
• Develop and deliver training on threat intelligence awareness and utilization.
• Automate intelligence collection, processing, and reporting workflows where possible.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 6 years of experience in cybersecurity, with at least 3 years focused on threat intelligence analysis.
• In-depth understanding of cyber threats, attack methodologies, and adversary TTPs.
• Proficiency in utilizing various threat intelligence platforms, tools, and data sources.
• Strong analytical, research, and critical-thinking skills.
• Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.
• Knowledge of network security, endpoint security, and security incident response processes.
• Excellent written and verbal communication skills, with the ability to convey complex information clearly and concisely.
• Experience in creating compelling threat intelligence reports and presentations.
• Ability to work independently, manage multiple priorities, and thrive in a remote, fast-paced environment.
• Relevant certifications such as GIAC Certified Intelligence (GCTI), CISSP, or OSCP are a plus.

• Monitor, analyze, and interpret threat intelligence data from various sources (open-source, commercial feeds, internal logs).
• Identify emerging threats, vulnerabilities, and attack vectors relevant to the organization's industry and technology stack.
• Develop and maintain threat actor profiles, including their tactics, techniques, and procedures (TTPs).
• Produce high-quality threat intelligence reports, briefings, and alerts for technical and executive audiences.
• Collaborate with incident response teams to provide context and support during security incidents.
• Develop and implement threat hunting strategies to proactively identify malicious activity within the network.
• Contribute to the enhancement of security monitoring tools and SIEM capabilities.
• Research and recommend new threat intelligence tools and methodologies.
• Participate in security awareness training and provide expertise to other teams.
• Maintain an understanding of global cyber threat trends and geopolitical factors influencing cyber warfare.
• Evaluate the effectiveness of existing security controls against identified threats.
• Support the development and refinement of incident response playbooks.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 5 years of experience in cybersecurity, with a significant focus on threat intelligence, security operations, or incident response.
• Demonstrated experience in analyzing malware, phishing campaigns, and advanced persistent threats (APTs).
• Proficiency with threat intelligence platforms (TIPs), SIEM tools, and EDR solutions.
• Strong understanding of networking protocols, operating systems (Windows, Linux), and common attack vectors.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Excellent analytical, critical thinking, and problem-solving skills.
• Strong written and verbal communication skills, with the ability to present complex information clearly.
• Relevant certifications such as CISSP, GIAC (GCTI, GCFA, GREM), or CompTIA Security+ are highly desirable.
• Ability to work effectively in a team environment and independently when required.

About Azentio

Azentio Software incorporated in 2020 at Singapore, has been carved out of 3i Infotech, Beyontec Technologies and Path Solutions. Azentio Software provides mission critical, vertical-specific software products for customers in banking, financial services and insurance verticals and includes key products such as KASTLE (Universal Lending), AMLOCK (Anti-Money Laundering & Compliance software suite), iMal, PREMIA Astra (Core Insurance software), ORION (Enterprise Resource Planning software) and MFUND Plus (Asset Management platform). Azentio has over 800 customers in more than 60 countries, with a team of over 2,300 employees across offices in 12 countries (and growing) globally and is wholly owned by Funds advised by Apax Partners.

Azentio offers a comprehensive range of products – serving core operations to modern digital needs – for the financial services industry. Our deep domain knowledge and solutions in financial services extend across insurance, retail and corporate lending, Islamic Banking, anti-money laundering and asset management. In addition, Azentio proudly serves mid-market enterprises across the Middle East, Africa, Asia Pacific, and India with a comprehensive ERP solution.

At Azentio, we believe that growth is a continuous journey. We believe that each step of this journey must be taken by committing to excellence - excellence in our products, our services, our ideas, and our people.

Job Title: Cyber Security Engineer/Analsyt

Years of Experience: 3 to 5 years

Location: Navi Mumbai

Role Summary:

We are looking for a highly motivated and skilled Cybersecurity Analyst to join our Information Security team. This role is critical in monitoring and defending our systems against security threats, ensuring compliance with internal and regulatory standards, and supporting ongoing improvement of our security posture across on-premise, cloud, and hybrid environments.

Key Responsibilities:

Threat Detection & Response

Monitor and analyze alerts from SIEM, EDR, firewalls, and other tools to detect suspicious behavior and potential incidents.

Triage, investigate, and respond to security alerts and incidents in real-time, including root cause analysis and mitigation.

Develop and maintain incident response playbooks and procedures.

Participate in post-incident reviews and create incident reports with lessons learned.

Vulnerability Management

Conduct regular vulnerability scans across infrastructure, applications, and endpoints.

Analyze scan results, assess risk severity, and coordinate with IT/DevOps teams for timely remediation.

Track and validate remediation efforts, escalating critical risks when necessary.

Security Operations

Perform log analysis, system audit reviews, and network traffic monitoring for anomalous activity.

Support data loss prevention (DLP), endpoint protection, and cloud security monitoring.

Assist in configuration and tuning of security tools (SIEM, XDR, WAF, etc.).

Policy, Compliance & Risk

Contribute to the development, review, and enforcement of security policies, standards, and procedures.

Support audits and compliance efforts (e.g., ISO 27001, SOC2, GDPR).

Help track risk registers and support risk assessments for new projects or vendors.

Awareness, Reporting & Documentation

Maintain up-to-date incident documentation, threat intelligence feeds, and knowledge base.

Provide regular metrics and reporting to leadership on security events and posture.

Support user awareness campaigns and phishing simulations, if applicable.

What skills required?

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.

2–4 years of hands-on experience in a SOC or security analyst role.

Proficient with SIEM platforms (e.g., Sentinel, QRadar), EDR (CrowdStrike, Defender), and vulnerability scanners (e.g., Tenable, Qualys).

Knowledge of security frameworks like NIST, ISO 27001, MITRE ATT&CK.

Strong understanding of TCP/IP, common attack vectors, malware behavior, and threat mitigation techniques.

Familiarity with incident response lifecycle and forensic practices.

Preferred Skills & Certifications:

Certifications: CEH, or equivalent.

Scripting & Automation: Basic knowledge of PowerShell, Python, or Bash for automating tasks.

Cloud Security: Exposure to AWS/Azure/GCP security tools and best practices.

Experience with ticketing and case management systems (Jira, ServiceNow, etc.).

What We Offer:

A collaborative, security-first environment.

Opportunities to work with modern security tools and mature DevSecOps practices.

Support for certifications and continued learning.

Competitive salary and benefits.

What we Aim for?

Azentio aims to be the leading provider of Banking, Financial Services & Insurance (BFSI) & Enterprise Resource Planning (ERP) software products in Asia Pacific, Middle East & Africa & United States. We will achieve this by:

• Providing world class software products, built on the latest technologies.
• Providing best in class customer service, built on a deep understanding of our domains and local nuances.
• Being an employer of choice, attracting high quality talent.
• Achieving top quartile growth and margins.

Azentio Core Values:

We work as one, Collaboratewithout boundaries, and win together.

We work with Uncompromising Integrity and Accountability.

Customer is at the core of all that we do.

We are Diverse and Inclusive. We treat our people, our customers and our wider community

with Respect and Care.

We Innovate, we Exceland we Grow Together.

We Give Back to our communities through our business and our people.

We take Pride in all that we do and together we Enjoy the journey

Key Responsibilities:

• Monitor and respond to security alerts from EDR/XDR platforms such as SentinelOne.
• Perform in-depth threat analysis and triage incidents to determine severity and impact.
• Implement and maintain endpoint security solutions across the organization.
• Conduct proactive threat hunting and behavioral analysis using EDR and XDR tools.
• Collaborate with the SOC team and IT to ensure timely containment, eradication, and recovery from security incidents.
• Document incident findings and assist with post-incident reporting and root cause analysis.
• Maintain compliance with internal security policies and regulatory requirements.
• Recommend improvements in security posture based on threat trends and vulnerability assessments.

Required Skills & Qualifications:

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.
• 3+ years of hands-on experience with EDR/XDR solutions (SentinelOne preferred).
• Strong understanding of endpoint protection, threat detection, and incident response methodologies.
• Familiarity with MITRE ATT&CK framework and threat intelligence principles.
• Ability to analyze logs, endpoint telemetry, and network data to identify threats.
• Experience with SIEM tools (e.g., Splunk, QRadar, or similar) is a plus.
• Excellent analytical, communication, and problem-solving skills.

POSITION TITLE :- Cyber Security Trainer

LOCATION :- Nerul

TIMING :- 9am to 7pm and 11am to 9pm

MODE OF TRAINING :- Offline

KEY RESPONSIBILITIES:-

*Conduct of Technology training as per defined curriculum / course

* Help students to complete projects / assignments in lab

* Upgrade to new technologies as per business need –

* Track the batch progress time to time and report escalations to management.

COMPETENCIES/SKILL :-

Good knowledge in

* CCNA

* Basic to advance Kali Linux

* CEHv12

* Network Pentesting

* Web-Application Pentesting

* Active Directory Pentesting

* API Pentesting

* Mobile Pentesting

* Cloud Security

* Cyber Law

Qualification:-

BSc/MSc (Computer Science/Electronics/Information Technology) OR

B.E./M.E. (Computer Science/Electronics/Mechanical Engineering/Information Technology) OR

Previous Experience:-

Minimum 1 year or Fresher with certification

Compensation Range:- 20k - 40k per month

Job Types: Full-time, Permanent

Pay: ₹15, ₹40,000.00 per month

Work Location: In person

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS, firewalls, etc.).
• Analyze security incidents, identify root causes, and develop remediation plans.
• Conduct vulnerability assessments and penetration testing to identify system weaknesses.
• Implement and manage security controls and technologies to protect networks and data.
• Develop and maintain security policies, procedures, and documentation.
• Respond to and manage security incidents, including containment, eradication, and recovery.
• Conduct security awareness training for employees.
• Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Collaborate with IT teams to ensure security best practices are integrated into all systems and applications.
• Assist in the development and testing of disaster recovery and business continuity plans.
• Participate in security audits and compliance checks.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 3+ years of experience in cybersecurity operations or a related IT security role.
• Strong knowledge of network security principles, protocols, and technologies.
• Experience with SIEM tools (e.g., Splunk, QRadar, ArcSight).
• Familiarity with intrusion detection/prevention systems (IDS/IPS) and firewalls.
• Understanding of vulnerability scanning tools (e.g., Nessus, Qualys).
• Knowledge of incident response methodologies and best practices.
• Relevant security certifications such as CompTIA Security+, CISSP, CEH are highly desirable.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities.
• Ability to work independently and manage time effectively in a remote setting.