Cybersecurity GRC Junior Assessor

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

About the role

EOR SOFTWARE LTD is a UK-registered software development company.

We are looking for a Cybersecurity Technical Specialist based in India who can quickly study unfamiliar products, prepare for technical discussions, and participate in live calls with software vendors in English.

Responsibilities

• Study vendors’ products and the prepared documentation before each call.

• Quickly understand the product’s purpose, architecture, deployment, integrations, licensing, and limitations.

• Collect missing information from the internal technical team using a short checklist.

• Participate in vendor calls in English and present the agreed use case.

• Ask clarifying questions and document requirements, limitations, and next steps.

• Never guess or invent technical information. If an answer has not been confirmed, explain that the information will be checked with the technical team and provided later.

• Prepare a short, structured summary after each call.

Requirements

• Strong spoken English at a practical B2+ level or higher.

• 2–5 years of relevant professional experience.

• Knowledge of Windows and network fundamentals, endpoint security, AV/EDR, vulnerability management, penetration testing, and Red Team concepts.

• Ability to understand technical questions and clearly explain cybersecurity concepts without relying on a prepared script.

Relevant professional backgrounds may include cybersecurity technical or product support, security consulting, SOC L2, endpoint security, solutions engineering, technical presales, and junior or mid-level penetration testing.

Engagement and compensation

• Fully remote, part-time contractual engagement.

• No fixed monthly working hours.

• Approximately 5–10 completed vendor calls per month.

• Calls are arranged in advance and require availability during agreed periods overlapping with European business hours.

• Compensation is USD 30 before taxes per completed vendor call.

• Expected monthly compensation is USD 150–300, depending on the number of completed calls.

• This is not a full-time salaried position. The annual salary range displayed on the platform is an estimated annual equivalent based on the expected call volume.

Selection process

• Short screening call with the manager, including a live English conversation.

• Rapid-learning exercise based on public documentation for an unfamiliar cybersecurity product.

• Short simulated vendor call focused on product understanding, technical communication, and handling unknown questions.

• Final interview.

Offensive-security tasks will not be performed during the assessment.

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less

 SOC analyst 

Location: Mumbai 

Experience: - 7 to 10 Years 

Band - 2B 

Role and Responsibilities: 

1. Develop, implement, and oversee the organization's comprehensive security strategy. 
2. Lead and mentor a team of security analysts to ensure high performance and professional growth. Act as a trusted advisor to executive leadership on security matters and emerging threats. 

• Threat Monitoring & Incident Response: 
• Oversee the detection and analysis of cybersecurity threats and vulnerabilities. 
• Manage the incident response process, ensuring timely identification, mitigation, and reporting of security incidents. 
• Collaborate with cross-functional teams to perform root cause analyses and implement corrective actions. 
• Risk Management & Compliance: 
• Conduct regular risk assessments and audits to ensure compliance with industry regulations and standards (e.g., ISO 27001, GDPR, SOC 2). 
• Implement and enforce policies, procedures, and controls to minimize risks and maintain compliance. 

1. Collaborate with legal and compliance teams to address security-related legal or regulatory requirements 

• Tools & Technology Management: 
• Evaluate, recommend, and implement security tools and technologies to strengthen defenses. 
• Oversee the configuration, maintenance, and monitoring of security infrastructure, including firewalls, SIEM systems, and endpoint protection tools. 
• Ensure the security of cloud platforms, networks, and on-premises systems. 
• Training & Awareness: 
• Develop and lead employee security awareness programs to promote a culture of security. 
• Stay current on emerging security trends and technologies to anticipate potential risks. 
• Vendor & Stakeholder Management: 
• Liaise with external vendors, consultants, and auditors to enhance security measures. 
• Build strong relationships with internal stakeholders to align security initiatives with business objectives. 

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43

At Shipthis, we are building a better future for freight forwarders by evolving traditional operations into fully digital, efficient, and scalable systems. We’re a fast-growing product company where every individual has the opportunity to take ownership, move fast, and create real impact. If you enjoy solving complex problems, shaping products from the ground up, and influencing technical direction, Shipthis is the place for you.

Learn more at www.shipthis.co

Role Overview

We are looking for an associate-level SecOps Engineer to support security operations, compliance, endpoint management, cloud infrastructure, and DevOps engineering. The role will work closely with the CTO/CISO and engineering team. Security and compliance are core responsibilities; when those priorities are lighter, the engineer will focus on CI/CD, infrastructure automation, reliability, monitoring, performance, and cloud cost optimization.

What You’ll be Doing

Security Operations

• Monitor infrastructure, application, and security alerts and assist with incident investigation.
• Review access controls, privileged accounts, service accounts, permissions, and periodic access reviews.
• Support infrastructure hardening, logging, monitoring, backup, recovery, and other security controls.
• Track security issues and corrective actions through closure.

Vulnerability Management

• Run and review application and infrastructure vulnerability scans.
• Maintain a vulnerability register and coordinate remediation with engineering teams.
• Support VAPT and penetration-testing exercises and validate closure of findings.
• Monitor dependencies, containers, operating systems, and cloud infrastructure for known vulnerabilities and patching needs.

Compliance & Governance

• Support ongoing ISO/IEC 27001, SOC 2, GDPR, customer-security, and internal-policy requirements.
• Maintain audit evidence, control registers, security policies, procedures, risk items, and remediation records.
• Assist with internal/external audits, vendor assessments, customer security questionnaires, and asset inventories.
• Maintain evidence for access reviews, vulnerability management, incidents, onboarding/offboarding, backups, and infrastructure changes.

MDM & Endpoint Security

• Administer the company MDM platform and enroll/manage company laptops, desktops, and mobile devices.
• Maintain device inventory and monitor endpoint compliance.
• Enforce approved controls such as disk encryption, screen locks, password requirements, patching, and endpoint protection.
• Support employee device onboarding/offboarding, approved application deployment, lost/stolen-device procedures, and remote wipe where authorized.
• Maintain endpoint security and MDM evidence required for audits and troubleshoot enrollment or policy issues.

DevOps, CI/CD & Cloud

• Maintain and improve CI/CD pipelines, deployment workflows, build times, caching, and rollback processes.
• Support production and non-production cloud infrastructure, networking, DNS, TLS certificates, IAM, and secrets.
• Automate repetitive deployment, infrastructure, security, and compliance tasks.
• Improve monitoring, logging, alerting, reliability, resource utilization, and cloud costs.
• Troubleshoot pipeline, deployment, and infrastructure issues and participate in root-cause analysis.

Required Fundamentals

• Basic knowledge of Linux, networking, HTTP/HTTPS, DNS, TLS, Git, Docker, cloud computing, APIs, and web applications.
• Understanding of IAM, MFA, least privilege, vulnerabilities/CVEs, encryption, logging, patching, and secrets management.
• Strong troubleshooting, ownership, attention to detail, and willingness to learn.

Desired Qualifications

• 1–2 years of experience with strong fundamentals are welcome.
• Basic scripting knowledge in Python, Bash, or similar.
• Interest in cybersecurity, cloud infrastructure, automation, and troubleshooting.
• Exposure to AWS/GCP/Azure, Terraform, GitHub Actions, Cloudflare, OWASP, vulnerability scanners, MDM, ISO 27001, or SOC 2 is a plus, not mandatory.

We Welcome Candidates:

• Who can join immediately
• Female candidates returning to work after a career break are strongly encouraged.

We are an equal opportunity employer and are committed to fostering diversity and inclusivity. We do not discriminate based on race, religion, color, gender, sexual orientation, age, marital status, or disability status.

Job Synopsys

Location: Bangalore

Job Type: Full-time, Permanent

Experience: 1-2 years

Industry: Software Product