Cybersecurity Engineer

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications

Key Responsibilities:

1. Network Engineering & Team Leadership

• Architect & Maintain: Design, implement, and manage secure, scalable network architectures (LAN, WAN, VPN, and Google Workspace) supporting both corporate offices and widespread on-site clinic networks.
• Lead the Team: Mentor and manage a team of system/network engineers, setting clear milestones, managing internal ticketing escalations, and conducting performance reviews.
• Uptime & Redundancy: Ensure 99.9% uptime for critical health-tech delivery systems by monitoring network traffic, troubleshooting bottlenecks, and implementing failover mechanisms.

2. Data Privacy, Cyber Security & Compliance Safeguards:

• Privacy & Zero-Trust Infrastructure: Implement strict access control mechanisms, data encryption standards (at rest and in transit), and zero-trust network frameworks to protect sensitive personal health information (SPI/PHI).
• End-to-End Security Architecture: Oversee the deployment and maintenance of enterprise-grade Antivirus/EDR solutions, End-to-End Firewalls, and comprehensive Cybersecurity frameworks to defend against external and internal threats.
• Access Control & Governance: Define, implement, and enforce robust Access Control policies—including Least Privilege and Role-Based Access Control (RBAC)—across all corporate, clinical, and Google Workspace environments.
• Access Reviews & Audits: Establish and oversee routine, formalized Access Review processes, ensuring user permissions, administrative privileges, and third-party access are regularly audited and validated.
• Regulatory Alignment & Audit Readiness: Align IT, network policies, and access governance protocols with Indian data protection laws (DPDP Act) and global healthcare standards (HIPAA principles). Conduct routine vulnerability assessments and maintain clean compliance logs.

3. Data Data Understanding & Visualization:

• Infrastructure Analytics: Look beyond raw logs. Analyze data flow patterns, bandwidth utilization, and system performance logs to deeply understand network health.
• Executive Dashboards: Transform complex IT operational data, compliance metrics, and access audit logs into intuitive, actionable visual dashboards using tools like Tableau, Power BI, or AWS QuickSight.
• Data-Driven Decisions: Present clear data trends to the executive leadership team regarding resource utilization, forecasting future capacity needs, and justifying infrastructure spend.

Job Description – Tines SOAR Engineer

Job Title: Tines SOAR Engineer

Experience: 6+ Years

Employment Type: Contract

Job Location: India – Hybrid/Remote

Company: Prama.ai

About the Role

Prama.ai is looking for an experienced Tines SOAR Engineer to design, develop, and maintain security automation workflows for enterprise SOC environments. The ideal candidate should have strong hands-on experience with Tines SOAR, security operations, incident response, API integrations, and automation.

Key Responsibilities

• Design, develop, and maintain automation workflows (Tines Stories).
• Build and enhance security playbooks for incident response and alert handling.
• Develop integrations between Tines and SIEM, EDR/XDR, IAM, ITSM, and other security tools.
• Implement integrations using REST APIs, Webhooks, JSON, and OAuth.
• Automate repetitive SOC and security operations to improve incident response efficiency.
• Troubleshoot, monitor, and optimize Tines automation workflows.
• Collaborate with SOC, Security, Infrastructure, and IT teams.
• Support security automation use cases across enterprise environments.

Required Skills

• 6+ years of IT/Security experience with strong hands-on experience in Tines SOAR.
• Hands-on experience developing Tines Stories, Actions, Event Transformations, and API integrations.
• Strong understanding of SOC, Incident Response, Security Operations, and Security Automation.
• Strong knowledge of REST APIs, JSON, Webhooks, and OAuth.
• Experience with at least one SIEM:
• Microsoft Sentinel
• Splunk
• IBM QRadar
• Google Chronicle
• Experience with at least one EDR/XDR:
• Microsoft Defender
• CrowdStrike
• SentinelOne
• Cortex XDR
• Scripting experience in Python, JavaScript, or PowerShell.
• Experience with ServiceNow or Jira.
• Working knowledge of Windows/Linux environments.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS.
• Knowledge of Active Directory, Entra ID, or Okta.

Preferred Skills

• Experience working with Banking/BFSI clients.
• Knowledge of Microsoft Security Stack.
• Understanding of Threat Intelligence and MITRE ATT&CK.
• Exposure to AWS or Azure Security.
• Experience with enterprise SOC automation and security integrations.

Preferred Certifications

• Tines Certification
• Microsoft SC-200
• CompTIA Security+ / CySA+
• Microsoft AZ-500

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Greetings from zealous sevices!

GoLang (Soln Architect) -(9 AM to 6PM) 

Experience: 10-12 Yrs 

Need a senior Solution Architect - No BGV - ok with consultants 

Own end-to-end solution architecture for a cloud-based cybersecurity platform operating at massive scale (millions of assets), spanning multiple product modules and a broad third-party integration ecosystem.

What They'll Do 

Define and own the overall solution architecture across multiple product modules (e.g., detection, response, asset inventory, reporting), ensuring they work as a coherent, scalable system rather than disconnected parts 

Design for scale: architecture that reliably handles millions of assets/endpoints with predictable performance, cost, and reliability as volume grows 

Lead cloud infrastructure architecture decisions, compute, storage, networking, multi-region/multi-tenant strategy, disaster recovery 

Architect and govern third-party integrations (SIEM/SOAR, ticketing, identity providers, cloud provider APIs, threat intel feeds, etc.), define integration patterns, data contracts, and reusable frameworks rather than one-off connections 

Create and maintain architecture roadmaps, capacity plans, and technical strategy aligned with product/business roadmap 

Set architectural standards and guardrails (scalability, security, data flow, API design) across engineering teams 

Act as the technical bridge between engineering, product, security, and infrastructure/DevOps teams 

Conduct architecture reviews, threat-model system designs, and identify scaling bottlenecks or single points of failure before they hurt production 

Own key non-functional requirements: performance, availability, security, cost-efficiency, compliance 

Support presales/enterprise customer conversations on architecture, especially for large or complex deployments 

Evaluate and select core technologies (data stores, messaging systems, orchestration, IaC tooling) 

What They Should Have 

8–12+ years in software/infra engineering, with 4+ years specifically in a solution/enterprise architect role 

Proven experience architecting systems at scale (millions of records/assets/events), not just designing on paper, but having operated such systems in production 

Deep cloud architecture expertise (AWS/GCP/Azure), multi-account/multi-tenant design, cost optimization, networking, IAM 

Strong grasp of distributed systems patterns: data partitioning, eventual consistency, event-driven architecture, caching strategies

Experience designing integration architectures (APIs, webhooks, message queues) across many heterogeneous third-party systems 

Security architecture fluency,this is a security product, so the architect must think adversarially about their own system 

Ability to produce architecture documentation (C4 diagrams, ADRs, data flow diagrams) that both engineers and executives can use 

Track record of cross-functional influence, able to align multiple engineering teams around a shared architecture without direct authority 

Cybersecurity domain knowledge (SIEM/EDR/CNAPP/CSPM concepts, threat detection pipelines), or equivalent adjacent domain with fast ramp-up ability 

Nice to Have 

Experience with specific integration ecosystems relevant to your product (e.g., Splunk, ServiceNow, Okta, AWS Security Hub) 

Familiarity with IaC (Terraform), service mesh, and Kubernetes at scale Enterprise/regulated-industry experience (SOC 2, FedRAMP, ISO 27001) shaping architecture decisions 

Prior experience scaling a product from ""hundreds of thousands"" to ""tens of millions"" of managed assets

🚨 We're Hiring: Network Engineer 🚨

ZigZag AI is looking for a Network Engineer with 1+ year of hands-on experience to join our team!

What we're looking for:

🔹 Solid working knowledge of Firewalls & Firewall Rules

🔹 Experience with NVR/DVR systems

🔹 Strong understanding of Port Forwarding & NAT

🔹 Good communication skills — both Hindi and English are a must

Compensation: ₹4 LPA

About ZigZag AI:

Zigzag AI is building the future of operational intelligence. Our AI connects to existing cameras and helps businesses understand what is happening on the ground, spot issues early, and take action faster. From shops and bungalows to hotels, factories, and hospitals, Zigzag helps teams run smoother, safer, and smarter operations every day.

This is not just monitoring. This is AI that drives execution.

Trusted by leading clients such as Tata, Birla, Treebo, JP Minda, Philips, and many more.

If you're someone who enjoys solving real-world networking problems and wants to grow with a fast-paced, mission-driven team, we'd love to hear from you!

#Hiring #NetworkEngineer #ITJobs #FirewallEngineer #CCTV #NVR #DVR #JobOpening #ZigZagAI #OperationalIntelligence