3,053 Security Consulting jobs in India
Security Consulting Practitioner
Posted today
Job Viewed
Job Description
Project Role : Security Consulting Practitioner
Project Role Description : Advise clients on their business protection journey by shaping security strategy, designing solutions, and providing guidance to strengthen cyber resilience.
Must have skills : Static Application Security Testing (SAST)
Good to have skills : Dynamic Application Security Testing (DAST)
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education
Summary: As a Security Advisor, you will provide enterprise-level advice to make organizations cyber resilient. Your typical day will involve engaging with various stakeholders to assess their security posture, identifying vulnerabilities, and recommending strategies to enhance their defenses against cyber threats. You will work collaboratively with teams to ensure that digital assets are protected while fostering trust and transparency in security practices. Roles & Responsibilities: - Delegating work and assignments to team members - Ensure team meets SLAs & timely client deliverables - Collaborating with the team to identify and fix technical issues - Conducting security audits to identify areas of improvement - Guiding the team through technical issues and challenges - Should have knowledge on HTML, CSS, Javascript, JQuery & AngularJS Professional & Technical Skills: - Must To Have Skills: Proficiency in Static Application Security Testing (SAST). - Good To Have Skills: Experience with Dynamic Application Security Testing (DAST). - Strong understanding of secure coding practices and application vulnerabilities. - Experience with threat modeling and risk assessment methodologies. - Familiarity with security frameworks and compliance standards such as OWASP and NIST. Additional Information: - The candidate should have minimum Minimum 5 years of experience as Web developer & 2 years exp as Tech lead. - This position is based at our Bengaluru office. - A 15 years full time education is required. - BTech, MTech, MCA or BSc Computers
15 years full time education
IT Security Consulting Professional
Posted today
Job Viewed
Job Description
As the world’s leading vendor of Cyber Security, facing the most sophisticated threats and attacks, we’ve assembled a global team of the most driven, creative and innovative people. At Check Point, our employees are redefining the security landscape by meeting our customers’ real-time needs and providing our cutting-edge technologies and services to an ever-growing customer base.
If you want to make the world a safer place – you belong with us.
Job Location - Bhubaneshwar / Bangalore / Delhi / Mumbai
Major Responsibilities
- Work as a designated Professional Services Consultant under the Check point India Services team
- Deliver on-site and remote consulting services (design, implementation, optimization, audit, pre-sales, training etc)
- Be the expert in the use of Check Point products and assist customers to see the best ROI from Check Point product an services
- Setup labs and validate the design, migration procedure as per the project requirements
- Review and break down technical workflow in accordance to the project timeline
- Timely and proactive communication with customers, internal stakeholders throughout the project life cycle
- Educate clients, partners on design, deployment and operation best practices in relation to specific business industry
- Technical writing and PowerPoint presentation creation based on the project needs
- Manage customer expectations in terms of projects schedule and delivery quality
- Manage multiple client engagements simultaneously
- Collaborate and work with Check point internal teams and partner relationships
- Keep accurate daily records of project billable and non-billable time
Desired Background
- 7-10 years of relevant experience
- Experience with IT network design, implementation, consulting on security products
- Strong exposure in Check point VSX, Provider-1, 61K Firewall and other network security products
- Exposure in customer facing roles – consulting and pre-sales
- Extensive troubleshooting skills
- Very strong in Linux and Unix based OS
- Willingness to learn new technologies, self-learner
- Good to have experience in providing trainings
- Experience with check point products deployment – advantage
- Check point CCSM certification – advantage
Senior Security Consulting Manager
Posted today
Job Viewed
Job Description
Job Title: Deputy General Manager - Cyber Security
Location : Pune
Job Description
Role Overview:
We are seeking a highly skilled Senior Security professional to lead our customer-facing security portfolio. This role requires a strong combination of hands-on technical expertise, consulting acumen, and market knowledge. The successful candidate will drive security engagements across diverse technology domains while ensuring alignment with industry frameworks and customer business objectives.
Roles & Responsibilities:
- Lead the security portfolio in customer-facing engagements, acting as a trusted advisor and subject matter expert.
- Design, implement, and oversee security solutions across:
- Firewalls: FortiGate, Palo Alto, Cisco ASA/Firepower, Check Point
- Load Balancers: F5 BIG-IP (LTM, GTM)
- Telco networks, Datacenter, LAN/WAN enterprise environments
- Conduct threat and attack surface assessments and provide mitigation strategies.
- Translate cybersecurity frameworks (e.G., NIST CSF, ISO 27001, CIS, Zero Trust) into actionable programs for clients.
- Deliver security consulting services to C-level stakeholders and technical teams.
- Collaborate with partners, vendors, and ecosystem players to design and deliver best-fit solutions.
- Stay updated on market trends and threat landscape, ensuring solutions remain current and competitive.
- Provide mentoring and guidance to junior team members.
- Bring in practitioner view for security offering.
- Should have product development experience.
Required Technical Expertise:
- 15+ years of experience in cybersecurity, with at least 3–5 years in a customer-facing leadership role.
- Hands-on expertise in configuring, managing, and troubleshooting:
- Firewalls: FortiGate, Palo Alto, Cisco ASA/Firepower, Check Point
- Load Balancers: F5 BIG-IP (LTM, GTM)
- Strong knowledge of telco networks, datacenter security, LAN/WAN enterprise environments.
- Proven ability to conduct attack surface analysis and implement remediation measures.
- Familiarity with industry frameworks: NIST CSF, ISO 27001, CIS, Zero Trust, etc.
- Excellent consulting, presentation, and stakeholder management skills.
- Knowledge of cybersecurity vendor landscape and market trends.
Preferred Qualifications & Certifications:
- Industry certifications such as CISSP, CCSP, CISM, CEH.
- Vendor certifications: Palo Alto PCNSE, Fortinet NSE, Cisco CCNP Security, F5 Certified.
- Strong problem-solving and analytical skills.
- Ability to balance strategic advisory with hands-on technical delivery.
Key Attributes:
- Strong communication and interpersonal skills.
- Consulting mindset with ability to bridge business and technical discussions.
- Leadership skills to manage portfolio and guide teams.
- High integrity, customer-centric approach, and ability to perform under pressure.
Technology Architect - Security Consulting-Q2-FY 26
Posted today
Job Viewed
Job Description
Educational Requirements
Bachelor of Engineering
Service Line
Strategic Technology Group
Responsibilities
This role focuses on our strategic clients who are embarking on digital initiatives. The roles require you to work closely with sales and delivery teams to drive solutions for large and complex programs, identify technology big bets, develop solution propositions around them, prototype and take them to market. This role requires to network and collaborate with CDO as well as Digital and business leaders of client organizations, develop viewpoints on industry and digital technology trends influencing enterprises.
Preferred Skills:
Technology->Java->Core Java->Java Socket Programming
Technology->Mobile Testing->Device Clouds->AWS Device Cloud
Technology->Infrastructure Security->Secure Mail Gateway->Forcepoint Email Security Gateway
Senior Technology Architect - Security Consulting- Q3 FY 26
Posted today
Job Viewed
Job Description
- This role focuses on our strategic clients who are embarking on digital initiatives
- The roles require you to work closely with sales and delivery teams to drive solutions for large and complex programs identify technology big bets develop solution propositions around them prototype and take them to market
- This role requires to network and collaborate with CDO as well as Digital and business leaders of client organizations develop viewpoints on industry and digital technology trends influencing enterprises
Technology->Infrastructure Security->Virtualization Security->Kaspersky Security for Virtualization,Technology->Java->Core Java->Java Socket Programming,Technology->Cloud Security->AWS - Infrastructure Security->AWS WAF
Security Assessment
Posted today
Job Viewed
Job Description
Security Assessment & Penetration Testing (Immediate joiners only)
Job Description Experience, education, skills, licensure or training required: -->
- This individual should have extensive experience across the attack lifecycle and a demonstrated capacity to lead, design, and execute a penetration test against various technologies and stacks.
- Candidates are expected to scope, prepare and deliver technology oriented assessments that positively benefit the overall security posture of the organization. This role requires a desire to help drive fixes after testing cycles, both as short-term mitigations and long-term improvements.
- Graduate in Computer Science, Electronics or any relevant field.
- Demonstrable and relevant experience in the areas of Security Assessment and Pen Testing - > 6-9+ years – Must be a hands-on practitioner
- Must have and well versed with Secure Web Application and Network Security Testing. Reasonable working knowledge of Secure Code Review & Architecture and Mobile App Testing. Intermediate Python or any scripting skills will be helpful.
- Well versed with using tools like Checkmarx, Burp Suite, Aircrack, Fortify, IBM App Scanner, Nessus etc.
- References of work done and made available in GitHub (if any) , publications , blogs if any .
- Professional Certifications in the areas of Pen Testing – OSCP , OSWE ,GPEN GXPN , LPT , eCPTX for e.g.
- Independent, quick learner, coachable and willing to go the extra mile.
- Good communication skills backed up by a positive attitude.
- Experience running internal , external pen tests , has knowledge on red teaming , running tabletop exercises
- Conduct penetration tests focused on both the unique systems and technologies used at Prime Healthcare, as well as approved third party software and vendors
- Design, scope, and lead deep security assessments on internal and external facing systems including but not limited to Iot systems , wireless systems , infrastructure systems.
- Experience in at least one of PHP/Hack, Python, C/C++, Go , Java or .NET
- Experience translating technical concepts into language that is understood to audiences including software engineers, business and technical leaders
- Experience performing and leading white box and black box style assessments
- Experience with complex, multi-stage, multi-person pentests for new internal teams or external vendors
- Networking knowledge, including network virtualization technologies and ideally IPv6
Job Types: Full-time, Permanent
Pay: ₹1,200, ₹2,500,000.00 per year
Benefits:
- Health insurance
Application Question(s):
- What is your current CTC and expected CTC?
- The job location is at Hyderabad. are you willing to relocate?
Experience:
- total work: 6 years (Required)
Work Location: In person
Infrastructure Security Assessment
Posted today
Job Viewed
Job Description
Who We Are
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
The Role
Are you passionate about protecting companies from cyber threats? Do you want to be part of a team that safeguards the digital assets of cutting-edge organizations? Look no further – Kyndryl is seeking a Cybersecurity Specialist to join our team of talented Technical Specialists.
As a Cybersecurity Specialist, you will be at the forefront of protecting Kyndryl's customers' computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. You will use a variety of tools and techniques to defend against a wide range of cyber threats, such as malware, ransomware, phishing attacks, and data breaches.
But that's not all – at Kyndryl, you will also have the opportunity to implement new cybersecurity systems and policies to ensure the protection of our customers' data and assets. You will monitor and review potential threats from various cybersecurity systems and conduct proof-of-concepts (POCs) with new cyber security software to evaluate its effectiveness and potential integration into the organization's systems.
Not only will you be responsible for ensuring the security of Kyndryl's customers' network and systems, but you will also enrich the organization's knowledge towards potential cyber threats and best practices. You will provide automation scripts for threat hunting in customer environments using lessons learned from Cyber-attacks.
You will also have the opportunity to conduct penetration testing and threat and vulnerability assessments of applications, operating systems, and networks, responding to cybersecurity breaches and identifying intrusions. You will research and evaluate cybersecurity threats and perform root cause analysis, all while assisting in the creation and implementation of security solutions.
Additionally, you will have the opportunity to work in the area of security innovation, creating and experimenting with "outside the box" ideas that could change the trajectory of cyber security.
This is a unique opportunity to work with cutting-edge technology, be part of a dynamic team, and make a significant impact in the world of cybersecurity. If you're up for the challenge, apply now to join Kyndryl's cybersecurity team
Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
Who You Are
You're good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you're open and borderless – naturally inclusive in how you work with others.
Required Skills and Experience:
- Drive implementation of advanced Qualys platform features such as Threat Protection, Patch Management, Cloud View, and Multi-Vector EDR where applicable.
- Collaborate with IT operations and patch management teams to automate ticket generation and remediation workflows via integration with ITSM tools (e.g., ServiceNow).
- Develop automation scripts or leverage Qualys APIs for:
- Automated remediation tracking
- Alerting for critical vulnerabilities
- Integrating patching schedules and validation
- Maintain remediation SLAs by:
- Following up with asset owners
- Escalating overdue items
- Providing weekly status reports to the lead
- Participate in continuous security integration into DevSecOps for infrastructure components.
- Provide detailed reporting and dashboards for vulnerability trends, SLA adherence, and recurring risk patterns.
- Contribute to audit readiness by mapping Qualys findings to compliance frameworks (e.g., NIST, ISO, business specific regulations).
Being You
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
What You Can Expect
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
Get Referred
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Be The First To Know
About the latest Security consulting Jobs in India !
Security Assessment Engineer
Posted today
Job Viewed
Job Description
Mizuho Global Services Pvt Ltd (MGS) is a subsidiary company of Mizuho Bank, Ltd, which is one of the largest banks or so called ‘Mega Banks’ of Japan. MGS was established in the year 2020 as part of Mizuho’s long term strategy of creating a captive global processing centre for remotely handling banking and IT related operations of Mizuho Bank’s domestic and overseas offices and Mizuho’s group companies across the globe.
At Mizuho we are committed to a culture that is driven by ethical values and supports diversity in all its forms for its talent pool. Direction of MGS’s development is paved by its three key pillars, which are Mutual Respect, Discipline and Transparency, which are set as the baseline of every process and operation carried out at MGS.
What’s in it for you?
o Immense exposure and learning
o Excellent career growth
o Company of highly passionate leaders and mentors
o Ability to build things from scratch
Know more about MGS:
Job Title - VAPT SME
Job Location - Chennai
Job Description :
We are seeking a highly skilled and experienced Vulnerability Assessment SME to join our dynamic team. You will play a critical role in safeguarding our organization's information assets by identifying, assessing, and mitigating vulnerabilities.
Roles and Responsibilities:
- Conduct vulnerability assessments using industry-leading tools (e.G., Nessus, Tenable, Qualys).
- Analyze vulnerability assessment results to identify and prioritize risks.
- Develop and maintain vulnerability management processes and procedures.
- Coordinate vulnerability remediation activities with relevant stakeholders.
- Perform penetration testing to assess the effectiveness of security controls.
- Stay up-to-date on the latest security threats and vulnerabilities.
Relevant Skills and Experience:
- 5-7 years of experience in vulnerability assessment, penetration testing.
- Strong understanding of vulnerability management concepts, principles, and best practices.
- Proficiency in using vulnerability assessment tools (e.G., Nessus, Tenable, Qualys).
- Experience in conducting penetration testing using various methodologies (e.G., black box, gray box, white box) and custom scripting.
- Knowledge of common security threats, vulnerabilities, and attack vectors.
- Experience with network and system security tools (e.G., firewalls, intrusion detection systems, antivirus).
- Experience with scripting languages (e.G., Python, PowerShell).
- Experience with cloud security (e.G., AWS, Azure, GCP).
- Familiar with KALI Linux & Parrot OS Qualifications:
- Bachelor's degree in computer science, information technology, or a related field.
- Security certifications (e.G., CISSP, CISM, CEH, OSCP).
- Strong problem-solving and analytical skills.
- Excellent communication and interpersonal skills.
- Ability to work independently and as part of a team. Additional Skills (Preferred):
- Experience with source code analysis tools.
- Experience with web application security testing.
- Experience with mobile application security testing.
- Experience with security incident response
Address: 16th Floor, Tower-B Brigade, World Trade centre, 142, Rajiv Gandhi Salai, OMR, Perungudi, Chennai, Tamil Nadu ,
Security Assessment Engineer
Posted today
Job Viewed
Job Description
Signzy is a digital trust system. We provide identification, background checks, forgery detection
and contract management systems which enable contracting in a trustable, safe, legal, and
convenient manner. Our biometric user authentication system and blockchain-based digital trail
ensure non-repudiation. This increases compliance and enforceability in the court of law. We
consist of a tech-savvy team and are backed by investors who are enthusiastic about creating
solutions with technology.
Working at Signzy
● At Signzy we breathe software and exploit the latest technologies to create the most
amazing products. We comprise a tech-savvy team and are backed by investors who are
enthusiastic about creating solutions using technology.
● Signzy is looking for an Security Engineer. If you think you have what it
takes to get the job done, this is an invitation to be a part of the future!
JD for Security Engineer-1 Role
Responsibilities:
Application Security
- Perform secure code reviews , threat modeling, and static/dynamic application security testing (SAST/DAST).
- Integrate and maintain automated scanning tools (e.G., Semgrep, Snyk, Trivy, Gitleaks) in CI/CD pipelines.
- Collaborate with developers to remediate vulnerabilities and embed security in SDLC.
- Guide on secure architecture patterns (authentication, authorization, data encryption, API security, mobile app protections like SSL pinning and mTLS).
Infrastructure & Cloud Security
- Harden cloud infrastructure (AWS/GCP/Azure), including IAM, VPC design, encryption, and network segmentation.
- Implement infrastructure-as-code security checks for Terraform, Helm, and Kubernetes deployments.
- Conduct internal and external penetration tests , configuration reviews, and vulnerability management for servers, containers, and endpoints.
- Support continuous monitoring (WAF, SIEM, EDR/MDM) and incident response
Security Assessments & Compliance
- Lead periodic security assessments : vulnerability assessments, penetration testing, firewall rule reviews, user-access audits, and network segmentation reviews.
- Document findings, track remediation, and provide risk-based recommendations.
- Assist with evidence gathering for ISO 27001, SOC 2, PCI-DSS, GDPR, and internal security audits.
Continuous Improvement
- Research emerging threats (e.G., supply-chain attacks, npm/package ecosystem risks) and recommend mitigations.
- Contribute to security runbooks, policies, and developer awareness sessions.
Qualification
Must Have
- 2–4 years of experience in application or infrastructure security engineering.
- Strong understanding of web/mobile security, OWASP Top 10, cloud security fundamentals, and Linux/Unix systems.
- Hands-on experience with CI/CD pipelines and common security tools (SAST, DAST, container scanners, SIEM/EDR).
- Hands-on with SAST/DAST tools (e.G., Burp Suite, OWASP ZAP, Semgrep, Fortify)
- Knowledge of network & OS hardening (Linux, cloud workloads).
- Experience with internal and external penetration testing methodologies.
- Familiarity with common tools: Nmap, Metasploit etc.,
- Hands on experience with Mobile application security testing (Android and iOS)
- Familiarity with threat modeling frameworks (STRIDE, MITRE ATT&CK) and SBOM management.
- Scripting or programming skills (Python, Go, Bash) for automation and custom tooling.
- Should have fundamental knowledge of cloud environments
- Security-first mindset with curiosity and analytical thinking.
- Ability to review firewall rules, ACLs, and security groups for least-privilege.
- Understanding of network segmentation and zero-trust principles.
- Ability to translate complex vulnerabilities into actionable, developer-friendly guidance.
- Collaborative approach to working with engineering, DevOps, and compliance teams.
- Strong reporting & documentation skills (writing assessment reports).
- Knowledge of security standards (ISO 27001, NIST 800-53, CIS Benchmarks).
Good to Have
- Container & K8s Security : Familiarity with Trivy, Falco, Kubescape, Kyverno.
- IaC Security : Experience with Terraform/CloudFormation scanning (Checkov, Tfsec).
- DevSecOps Integration: Embedding security tests into CI/CD (GitLab, GitHub Actions, Jenkins).
- Advanced API Security : Hands-on with API gateways (Kong, Apigee, AWS API Gateway) and WAF tuning.
- Cloud-Native Security : Experience with GuardDuty, Security Hub, AWS Config, GCP SCC.
- Emerging Areas : AI/ML model security.
- Certifications (good-to-have, not must) : OSCP or Cloud Security certs (AWS Security Specialty).
Senior Security Assessment Manager
Posted today
Job Viewed
Job Description
Job Title: Senior Manager – VAPT (OSCP Certified)
Location: Any Metro City in India (Hybrid) – Mumbai / Bangalore / Delhi / Chennai / Hyderabad
Travel Requirement: Frequent travel to Japan (as per project requirement)
Experience: 7+ years
Certification: Mandatory – OSCP
About the Role:
We are seeking a highly skilled and experienced Senior Manager – Vulnerability Assessment and Penetration Testing (VAPT) professional to lead and deliver advanced security assessments for our clients. The ideal candidate will possess deep technical expertise in offensive security, team leadership experience, and a strong understanding of global cybersecurity frameworks. The role requires collaboration with international teams and client stakeholders, with periodic travel to Japan.
Key Responsibilities:
- Lead and execute comprehensive Vulnerability Assessment and Penetration Testing (VAPT) engagements across web, mobile, network, cloud, and infrastructure environments.
- Manage and mentor a team of security consultants to ensure high-quality project delivery.
- Develop customized testing methodologies aligned with client environments and industry standards (OWASP, PTES, NIST, ISO 27001).
- Prepare and present detailed technical reports, risk assessments, and remediation strategies to both technical and business audiences.
- Coordinate with Japanese and Indian client stakeholders, ensuring smooth communication, delivery, and compliance with project timelines.
- Stay updated with emerging threat vectors, exploits, and mitigation techniques.
- Drive automation and process improvements in security testing and reporting.
Required Skills and Qualifications:
- Minimum 7 years of hands-on experience in VAPT, Red Teaming, and Offensive Security.
- Mandatory certification: OSCP (Offensive Security Certified Professional) .
- Strong knowledge of exploit development, threat modeling, and post-exploitation techniques.
- Proficiency in tools such as Burp Suite, Metasploit, Nmap, Nessus, Qualys, Wireshark, and other manual testing tools.
- Solid understanding of secure coding practices and common vulnerabilities (OWASP Top 10, SANS 25).
- Experience working with cloud platforms (AWS, Azure, GCP) and modern DevSecOps environments.
- Excellent communication and presentation skills for client interactions and reporting.
- Ability to work independently in hybrid and multicultural environments.
- Prior experience engaging with Japanese clients or willingness to travel and adapt to cross-cultural settings.
Preferred Qualifications:
- Additional certifications such as OSCE, CRTP, CEH (Practical), CREST, GPEN, or GWAPT .
- Exposure to IoT/OT security, API testing , or threat hunting .
- Experience in managing offshore and onsite delivery teams.