Device Management

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Zscaler Network Security Engineer | 4–7+ Years

• Manage and troubleshoot Zscaler ZIA & ZPA, including policies, URL filtering, SSL inspection, DNS security, App Segments and App Connectors.
• Troubleshoot Client Connector, PAC, GRE/IPsec tunnels and Zscaler Digital Experience issues.
• Strong knowledge of TCP/IP, DNS, DHCP, IPAM, VLAN and Ethernet switching; Infoblox experience preferred.
• Must have working experience in one of: Palo Alto Firewall, Cisco LAN/Wi-Fi, or Cisco SD-WAN.
• Handle incidents, changes, SLA/KPI, ITIL processes, documentation and L3 escalations.
• Willingness to work in rotating/follow-the-sun shifts.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

🚨 We're Hiring: Network Engineer 🚨

ZigZag AI is looking for a Network Engineer with 1+ year of hands-on experience to join our team!

What we're looking for:

🔹 Solid working knowledge of Firewalls & Firewall Rules

🔹 Experience with NVR/DVR systems

🔹 Strong understanding of Port Forwarding & NAT

🔹 Good communication skills — both Hindi and English are a must

Compensation: ₹4 LPA

About ZigZag AI:

Zigzag AI is building the future of operational intelligence. Our AI connects to existing cameras and helps businesses understand what is happening on the ground, spot issues early, and take action faster. From shops and bungalows to hotels, factories, and hospitals, Zigzag helps teams run smoother, safer, and smarter operations every day.

This is not just monitoring. This is AI that drives execution.

Trusted by leading clients such as Tata, Birla, Treebo, JP Minda, Philips, and many more.

If you're someone who enjoys solving real-world networking problems and wants to grow with a fast-paced, mission-driven team, we'd love to hear from you!

#Hiring #NetworkEngineer #ITJobs #FirewallEngineer #CCTV #NVR #DVR #JobOpening #ZigZagAI #OperationalIntelligence

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

Strong Product Security Engineer / Security Engineer / Application Security Engineer / DevSecOps Engineer profiles

2

Mandatory (Experience 1) – Must have minimum 4+ years of hands-on Application/Product Security or Security Engineering experience,

3

Mandatory (Experience 2) – Strong hands-on experience in AWS Cloud Security, Infrastructure Security, and Application Security, with the ability to identify and address security risks at the application/code level.

4

Mandatory (Experience 3) – Must have hands-on experience in secure SDLC/DevSecOps, including code review, API security, CI/CD security automation, vulnerability management, VAPT/penetration testing, and security tooling.

5

Mandatory (Experience 4) – Must have hands-on experience with security audits and compliance frameworks, including SOC 2, GDPR, and ISO 27001, preferably having participated in or driven audits.

6

Mandatory (Experience 5) – Experience setting up, managing, and tracking security tools such as MDM, endpoint agents, security monitoring/scanning tools, secrets/access management, and related security tooling.

7

Mandatory (Experience 6) – Must demonstrate strong coding/development understanding with the ability to read/write code and assess security of APIs, applications, databases, and distributed systems; not just operate security tools.

8

Preferred (Experience 1) – Relevant security certifications such as CISSP, CEH, OSCP, or equivalent.

Greeting from Nam info!

We have a job opportunity for FortiGate Firewall , interested candidate & Kindly share your updated cv

Role description: FortiGate Firewall

Exp : 5+years

Work Location : Mumbai

Notice period : Immediate -15Days

Key Responsibilities

FortiGate Firewall Operations & Management

• Deploy, and maintain enterprise FortiGate firewall infrastructure and Security Fabric
• Configure and optimize FortiGate security policies, NAT rules, and traffic shaping
• Manage Forti Manager for centralized policy management and Forti Analyzer for logging and reporting
• Implement and maintain FortiGate high availability (HA) clusters and virtual domains (VDOMs)
• Perform advanced troubleshooting using FortiGate CLI and diagnostic tools
• Manage FortiGate firmware upgrades, patches, and security updates F5 BIG-IP Administration & Optimization
• Configure and maintain F5 BIG-IP systems including LTM, GTM, ASM, and APM modules
• Design advanced load balancing configurations with custom health monitors and persistence
• Implement SSL/TLS termination, certificate management, and SSL offloading strategies
• Develop and maintain complex iRules for application-specific traffic management
• Configure F5 Application Security Manager (ASM) policies and web application firewall rules
• Manage F5 Access Policy Manager (APM) for secure remote access and authentication
• Perform F5 system maintenance, upgrades, and disaster recovery procedures Technical Leadership & Incident Response
• Serve as Level 3 escalation point for complex FortiGate and F5 technical issues
• Lead critical incident response for security breaches and application delivery failures
• Conduct root cause analysis and implement preventive measures
• Develop technical documentation, runbooks, and knowledge base articles
• Participate in 24/7 on-call rotation for emergency response.

Required Technical Skills Qualifications

Expert-level FortiGate proficiency:

• FortiOS configuration and management
• FortiManager and FortiAnalyzer administration
• Security Fabric implementation and management
• VPN technologies (SSL VPN, IPSec)
• VDOM configuration and management
• FortiGate clustering and high availability.

Advanced F5 BIG-IP expertise:

• Local Traffic Manager (LTM) advanced configurations
• Global Traffic Manager (GTM) for DNS load balancing
• Application Security Manager (ASM) policy management
• Access Policy Manager (APM) implementation
• iRules development and troubleshooting
• SSL certificate lifecycle management
• Strong understanding of network protocols (TCP/IP, HTTP/HTTPS, DNS)
• Experience with network packet analysis and troubleshooting tools
• Knowledge of application delivery and web application security concepts

Certifications

• Fortinet Network Security Expert (NSE 7 or NSE 8)
• F5 Certified Technology Specialist (F5-CTS)
• F5 Certified Solution Expert (F5-CSE) - Highly Preferred
• Fortinet NSE 4 Security Professional

Sandhya D

Senior Executive Staffing

Company Description

Appiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.

Role Overview

We are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.

This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.

Key Responsibilities

• Design and implement secure AWS cloud architectures.
• Establish and maintain AWS security best practices and security controls.
• Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.
• Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.
• Implement and manage AWS security services including:
• AWS IAM
• AWS KMS
• AWS CloudTrail
• Amazon GuardDuty
• AWS Security Hub
• AWS Config
• AWS WAF
• AWS Secrets Manager
• Monitor and investigate security events, threats and suspicious activities.
• Lead or participate in cloud security incident response and root-cause analysis.
• Conduct vulnerability assessments and coordinate remediation.
• Perform AWS security posture reviews and identify misconfigurations.
• Review cloud architectures and provide security recommendations.
• Implement encryption and data protection controls.
• Secure CI/CD pipelines and support DevSecOps practices.
• Review Infrastructure as Code for security risks.
• Implement security automation wherever possible.
• Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.
• Establish security standards, policies and controls for AWS environments.
• Support compliance requirements and security audits.
• Mentor junior engineers and provide technical guidance.

Mandatory Technical Skills

Must Have

• 7+ years of overall IT/Security/Cloud experience
• Strong AWS Cloud Security experience
• Hands-on AWS security architecture
• AWS IAM
• IAM policies, roles, permissions and least privilege
• AWS networking security
• VPC, Security Groups and NACLs
• CloudTrail and security logging
• GuardDuty
• Security Hub
• KMS and encryption
• Vulnerability management
• Cloud security monitoring
• Incident response
• Security hardening
• Security architecture/design

Good to Have

• AWS Organizations / SCP
• Terraform / CloudFormation
• DevSecOps
• CI/CD security
• Docker/Kubernetes security
• SAST/DAST/SCA
• SIEM tools
• Python/Bash/PowerShell scripting
• CIS Benchmarks
• NIST
• ISO 27001
• SOC 2
• AWS security certifications