IT Hardware Engineer

📌 Job Description – Cybersecurity Professional

Position Title: Cybersecurity Professional

Location: Chandigarh

Department: IT Security & Compliance

Employment Type: Full-Time

Reporting To: Chief Information Security Officer (CISO) / IT Security Manager

Role Overview

We are seeking a highly skilled Cybersecurity Professional to safeguard our IT infrastructure, applications, and data assets against evolving cyber threats. The role involves conducting vulnerability assessments, penetration testing, network and cloud security, compliance audits, incident response, and employee training. The ideal candidate should have hands-on expertise across prevention, detection, response, and compliance frameworks (e.g., NIST, ISO 27001, HIPAA, SOC2).

Key Responsibilities

• 🔍 Security Assessments & AuditsPerform vulnerability assessments and penetration tests across networks, servers, endpoints, and applications.
• Conduct configuration audits of firewalls, routers, and cloud environments.
• Support and maintain compliance with HIPAA, PCI DSS, SOC2, ISO 27001, GDPR, NIST.

• 🌐 Network, Infrastructure & Cloud SecurityConfigure, monitor, and manage firewalls, IDS/IPS, and VPNs.
• Implement Zero Trust security models and secure remote access.
• Secure cloud environments (AWS, Azure, GCP) with IAM, encryption, and monitoring.
• Protect wireless and IoT networks from unauthorized access.

• 💻 Endpoint & Application SecurityDeploy and manage EDR/XDR solutions across endpoints.
• Ensure timely patch management for all critical systems.
• Perform secure code reviews, API testing, and DevSecOps integration.
• Manage Mobile Device Management (MDM) for BYOD and enterprise devices.

• 📊 Threat Monitoring & DetectionOperate and maintain SIEM platforms (Splunk, QRadar, ELK).
• Work with SOC teams to monitor logs and detect anomalies.
• Conduct threat hunting activities to uncover hidden risks.
• Respond to security alerts in real time.

• 🚨 Incident Response & RecoveryLead incident detection, containment, and eradication efforts.
• Perform digital forensics on compromised systems.
• Develop and maintain Disaster Recovery (DR) and Business Continuity Plans (BCP).
• Conduct post-incident analysis and provide lessons learned reports.

• 🔑 Identity & Access Management (IAM)Manage user provisioning, role-based access control, and Privileged Access Management (PAM).
• Implement Multi-Factor Authentication (MFA) and Single Sign-On (SSO).
• Ensure compliance with least-privilege and Zero Trust principles.

• 📜 Governance, Risk & Compliance (GRC)Develop and enforce cybersecurity policies, SOPs, and guidelines.
• Conduct risk assessments and maintain a risk register.
• Collaborate with auditors for compliance certifications (SOC2, ISO, HIPAA, GDPR).
• Assess and monitor third-party vendor security.

• 🎓 Security Awareness & TrainingDeliver cybersecurity awareness training for employees.
• Conduct phishing simulations and share reports.
• Educate executives and stakeholders on cyber risks and strategy.

• 🔒 Data Protection & PrivacyImplement data encryption (at rest and in transit) and DLP controls.
• Manage secure data backup and recovery processes.
• Conduct Privacy Impact Assessments to ensure regulatory compliance.

• Key Performance Indicators (KPIs)≥ 95% critical vulnerabilities remediated within SLA.
• ≥ 99% uptime of security monitoring tools.
• Zero major security incidents causing data loss/financial loss.
• Achieve/maintain compliance certifications (SOC2, ISO 27001, HIPAA, PCI DSS).
• ≥ 90% employee completion of cybersecurity awareness training.

Qualifications & Skills

• 🎓 Education & Experience3–7 years of experience in cybersecurity roles (analyst, engineer, consultant).
• Experience working with North American/Global clients preferred.

• 🛠 Technical SkillsStrong knowledge of firewalls, SIEM, IDS/IPS, EDR/XDR, and IAM solutions.
• Hands-on with penetration testing tools (Nmap, Metasploit, Burp Suite, Nessus, Wireshark).
• Familiarity with cloud security (AWS/Azure/GCP).
• Knowledge of compliance standards: HIPAA, PCI DSS, SOC2, ISO 27001, NIST CSF.
• Scripting/automation in Python, PowerShell, or Bash is a plus.

• 📜 Certifications (Preferred)CEH (Certified Ethical Hacker)
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CompTIA Security+ / CySA+
• CCSP (Certified Cloud Security Professional)
• ISO 27001 Lead Auditor (advantageous)

• Why Join Us?Work on cutting-edge cybersecurity projects with global clients.
• Gain cross-industry exposure in healthcare, fintech, retail, logistics, IT.
• Opportunity to lead projects in cloud security, compliance, and incident response.

Competitive salary, certification sponsorship, and performance incentives.

Overview

Adesso India specialises in optimization of core business processes for organizations. Our focus is on providing state-of-the-art solutions that streamline operations and elevate productivity to new heights.

Comprised of a team of industry experts and experienced technology professionals, we ensure that our software development and implementations are reliable, robust, and seamlessly integrated with the latest technologies. By leveraging our extensive knowledge and skills, we empower businesses to achieve their objectives efficiently and effectively.

Job description

As part of our dynamic international cross-functional team you will be responsible for the design, development and deployment of modern high quality software solutions and applications as an experienced and skilled Full-stack developer. 

Responsibilities:

Design, develop, and maintain the application 

Write clean, efficient, and reusable code

Implement new features and functionality based on business requirements

Participate in system and application architecture discussions

Create technical designs and specifications for new features or enhancements

Write and execute unit tests to ensure code quality

Debug and resolve technical issues and software defects

Conduct code reviews to ensure adherence to best practices

Identify and fix vulnerabilities to ensure application integrity

Working with other developers to ensure seamless integration backend and frontend elements 

Collaborating with DevOps teams for deployment and scaling

Requirements:

Bachelor’s degree in computer science or information technology, or a related field.

Proven experience as a skilled Full-stack developer. Experience in Utilities / Energy domain is appreciated.

Strong experience with Java (Springboot), AWS / Azure or GCP, GitLab and Angular and / or React. Additional technologies like Python, Go, Kotlin, Rust or similar are welcome

Excellent problem-solving and debugging skills. 

Strong communication and collaboration abilities to work effectively in a team environment.

Skills & Requirements

Java, Spring Boot, AWS, Azure, GCP, GitLab, Angular, React, Python, Go, Kotlin, Rust, Full-stack development, Software architecture, Unit testing, Debugging, Code reviews, DevOps collaboration, Microservices, Cloud computing, RESTful APIs, Frontend-backend integration, Problem-solving, Communication, Team collaboration, Software deployment, Application security, Technical documentation.

Budgeting and Planning:

• Assist in the development and management of the annual budget process.
• Monitor budget performance and provide variance analysis.
• Collaborate with department heads to develop and manage departmental budgets.

Data Analysis and Interpretation:

• Gather, analyze, and interpret financial data to identify trends and opportunities.
• Use financial modeling and data analysis tools to support decision-making.
• Prepare ad-hoc financial analyses as requested.

Strategic Support:

• Support strategic initiatives by providing financial analysis and insights.
• Evaluate the financial impact of potential business decisions.
• Assist in the development of business cases and financial justifications.

Process Improvement:

• Identify and recommend process improvements to enhance financial reporting and analysis.
• Contribute to the development and implementation of financial policies and procedures.
• Perform competitive Analysis.

Role and Responsibility:

 Developing firmware for robust embedded system devices

 Active involvement in designing architecture, communication protocols & selection of technology.

 Designing test cases and active participation in testing

 Team building and grooming new members.

Candidate Skill Set:

 Thorough knowledge and hands on experience of Embedded C programming.

 Experience of firmware development on multiple microcontroller families like AVR, MSP430, STM32,

Renesas, etc.

 Strong programming & debugging skills.

 Knowledge of IDE’s like Keil, AVR Studio, IAR, Cubesuit will be an added advantage.

 Hands on experience of working on wireless communication (BLE, Wi-Fi, Zigbee, LoRa, GSM/ GPRS)

Qualification:

 A team player with excellent analytical, problem-solving skills, with strong ability to quickly learn.

 Passion for developing products with new technologies.

 Bachelor's/ master’s degree in electronics related discipline or equivalent experience

 Experience of 1-3 years

• Good understanding of UI technologies like PHP JQuery JavaScript HTML 5 CSS Pearl Curl
• Good understanding of backend technologies like Java EE Servlets JSP Tag libraries and JSTL skills combined with a good understanding of Enterprise Java frameworks such as Spring and Hibernate
• Preferred Knowledge in Day CQ foundational concepts including the CRX repository the CQ platform the use of core frameworks such as Apache Sling and Apache Felix a solid understanding of all Day CQ building blocks including templates components dialogs widgets etc and the CQ development and deployment process
• Maintain and build solutions on top of the AEM Scene 7 DAM and SoCo modules
• Create and integrate content-driven applications on top of the CQ core platform and integrate with other systems