Network Security Engineer

A Senior Cybersecurity Engineer is responsible for safeguarding an organization’s IT infrastructure, applications, and data against cyber threats. With 5–10 years of experience, the role demands expertise in designing, implementing, and managing advanced security solutions, conducting risk assessments, and responding to incidents. Senior Engineers also mentor junior staff and contribute to strategic security planning.

Key Responsibilities

• Design, implement, and manage enterprise-level security solutions (firewalls, IDS/IPS, SIEM, endpoint protection).
• Conduct vulnerability assessments, penetration testing, and risk analysis.
• Monitor and respond to security incidents, ensuring timely resolution and documentation.
• Develop and enforce security policies, standards, and compliance frameworks (ISO 27001, NIST, GDPR).
• Collaborate with IT and business teams to integrate security into system architecture and processes.
• Lead incident response drills and disaster recovery planning.
• Provide guidance and mentorship to junior cybersecurity staff.
• Stay updated on emerging threats, tools, and technologies.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
• 5–10 years of proven experience in cybersecurity engineering or related roles.
• Strong knowledge of network security, cloud security (AWS, Azure, GCP), and endpoint protection.
• Hands-on experience with SIEM tools (Splunk, QRadar, ArcSight), firewalls, and intrusion detection/prevention systems.
• Certifications such as CISSP, CISM, CEH, or OSCP are highly desirable.

Skills

• Advanced problem-solving and analytical skills.
• Strong communication and leadership abilities.
• Ability to manage complex projects and handle escalations effectively.
• Proactive mindset with adaptability to evolving cyber threats.

Hi Folks, we are currently Hiring for Security Engineer.

Gemini said

Hiring: Security Engineer

Company : Pentabay Softwares

Location : Anna salai, Mount Road

Mode: Fulltime

Pentabay Softwares INC is looking for a proactive Security Engineer (2–7 Years Exp) to fortify our global digital solutions. As we scale our footprint in the Healthcare IT sector, you will play a critical role in safeguarding sensitive data (ePHI) and ensuring our cloud-native architectures are resilient against evolving threats.

The Mission

You will be the architect of our defense, bridging the gap between high-speed development and rigorous security standards. Your day-to-day will involve "shifting security left" by embedding DevSecOps practices into our CI/CD pipelines and leading our compliance efforts for SOC 2, ISO 27001, and HIPAA.

Key Responsibilities

Defense & Architecture: Design and maintain secure cloud (AWS/Azure/GCP) and on-prem environments. Implement IAM policies, Zero Trust frameworks, and robust secrets management.

Offensive Testing: Conduct regular vulnerability assessments (VAPT), penetration testing, and code reviews using tools like Burp Suite and Nessus.

DevSecOps & Automation: Integrate SAST/DAST/SCA scanning into engineering workflows. Automate security tasks using Python or Bash.

Incident Response: Monitor SIEM tools (Splunk/CrowdStrike), respond to threats, and develop risk mitigation strategies.

Healthcare Compliance (Plus): Ensure data integrity for HL7/FHIR APIs and maintain HIPAA/HITECH audit readiness for healthcare clients.

What You Bring

Experience: 2–7 years in Information/Application Security with a strong grasp of the OWASP Top 10 and threat modeling (STRIDE).

Technical Depth: Proficiency in network/endpoint security, PKI, encryption standards (TLS/SSL), and container security (Docker/Kubernetes).

Compliance Knowledge: Familiarity with NIST, GDPR, and SOC 2 frameworks.

Tools: Hands-on experience with Metasploit, Wireshark, and Infrastructure-as-Code (Terraform).

Bonus Points: Industry certifications like OSCP, CISSP, or CEH, and experience in Healthcare IT workflows.

Auditing space like ISO27001 , ISO9001 prefered

Why Pentabay?

At Pentabay, we offer more than just a job; we offer a security-first engineering culture.

Growth: A dedicated learning budget for certifications and conferences.

Impact: Work on cutting-edge Healthcare projects that demand the highest levels of data privacy.

Send resumes to : sandhiya.m at pentabay.com

🚨 We're Hiring: Network Engineer 🚨

ZigZag AI is looking for a Network Engineer with 1+ year of hands-on experience to join our team!

What we're looking for:

🔹 Solid working knowledge of Firewalls & Firewall Rules

🔹 Experience with NVR/DVR systems

🔹 Strong understanding of Port Forwarding & NAT

🔹 Good communication skills — both Hindi and English are a must

Compensation: ₹4 LPA

About ZigZag AI:

Zigzag AI is building the future of operational intelligence. Our AI connects to existing cameras and helps businesses understand what is happening on the ground, spot issues early, and take action faster. From shops and bungalows to hotels, factories, and hospitals, Zigzag helps teams run smoother, safer, and smarter operations every day.

This is not just monitoring. This is AI that drives execution.

Trusted by leading clients such as Tata, Birla, Treebo, JP Minda, Philips, and many more.

If you're someone who enjoys solving real-world networking problems and wants to grow with a fast-paced, mission-driven team, we'd love to hear from you!

#Hiring #NetworkEngineer #ITJobs #FirewallEngineer #CCTV #NVR #DVR #JobOpening #ZigZagAI #OperationalIntelligence

About Nerve Solutions

Nerve Solutions is a team of engineers building products for real-time risk management and surveillance in financial markets. Our solutions enable market participants to identify, monitor, and quantify risks and anomalies in live markets, allowing them to take corrective action at sub-second speeds.

We also develop products for automated trading and have become a trusted technology partner to some of the largest financial services organizations in the region.

About the Role

We are looking for a proactive and detail-oriented IT & Information Security Engineer to manage and maintain the organization's IT infrastructure while ensuring the security, availability, and reliability of our systems. The role involves providing technical support, administering hardware and software, strengthening cybersecurity practices, monitoring network activities, and implementing security controls to safeguard organizational assets.

The ideal candidate should have strong infrastructure knowledge, a security-first mindset, and the ability to troubleshoot technical issues while continuously improving the organization's IT environment.

Roles & Responsibilities

• Manage and maintain the organization's IT infrastructure, including hardware, software, servers, and network systems.
• Provide technical support to employees by troubleshooting hardware, software, network, and system-related issues.
• Configure, deploy, and maintain desktops, laptops, peripherals, printers, and other IT equipment.
• Set up user accounts, systems, and required software for new employees and support onboarding activities.
• Monitor network performance and employee network activities to ensure system security and compliance.
• Implement and maintain endpoint security solutions, antivirus tools, firewalls, and access control mechanisms.
• Perform regular system updates, security patching, vulnerability assessments, and preventive maintenance.
• Identify infrastructure risks and recommend security enhancements to minimize vulnerabilities.
• Maintain documentation for IT assets, software licenses, network configurations, security policies, and system inventories.
• Assist in implementing information security best practices, security audits, and compliance initiatives.
• Coordinate with internal teams to ensure IT services effectively support business operations.
• Stay updated with the latest cybersecurity threats, technologies, and industry best practices.

Required Skills

• 2–4 years of experience in IT Infrastructure, System Administration, or Information Security.
• Strong knowledge of Windows operating systems, networking, servers, and IT infrastructure.
• Experience troubleshooting hardware, software, network, and user-related issues.
• Knowledge of network security, endpoint protection, firewalls, VPNs, and vulnerability management.
• Experience with Active Directory, user access management, and system administration.
• Familiarity with Microsoft 365 administration is an added advantage.
• Understanding of backup, disaster recovery, and IT asset management.
• Strong analytical and problem-solving skills with attention to detail.
• Good communication and documentation skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Preferred Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Certifications such as CompTIA A+, Network+, Security+, Microsoft, CCNA, or equivalent will be an added advantage.

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

Position: Technical Lead – Forcepoint (Data & Cloud Security)

Company: Inflow Technologies

Location: Bangalore

Work Mode: Work From Office | 5 days/week

Experience Required: Minimum 6 years

Interview Process: 2 rounds (Virtual + Final Face-to-Face)

About Inflow Technologies

Founded in 2005, Inflow is a value-added IT infrastructure distributor covering Networking, Cybersecurity, UC&C, AIDC, Surveillance, Server, Storage & Software across India/South Asia. HQ'd in Bangalore with 20+ locations, backed by a 120+ certified technical team, and ~USD 700M+ annual run-rate revenue.

Position Overview

Acting as the Forcepoint subject matter expert, this role owns end-to-end design, deployment, and troubleshooting of enterprise data and cloud security architectures — spanning DLP, SWG, CASB, and SSE/ZTNA. The role sits at the intersection of solution architecture and hands-on L3 execution: defining security policies, configuring network proxies, and resolving complex support escalations in a client-facing, consultative capacity.

Core Products

• Forcepoint DLP (Endpoint, Network, Web, Email)
• Forcepoint Web Security
• Forcepoint Email Security
• Forcepoint CASB
• Forcepoint Suite / Forcepoint One
• Forcepoint Cloud Security / SSE (incl. ZTNA)
• Forcepoint DSPM

Key Responsibilities

1. Solution Design & Architecture

• Design enterprise architectures: DLP (Endpoint + Network + Discovery), Web Security (Proxy/Hybrid/Cloud), CASB & SaaS protection, Forcepoint Suite/One
• Install & configure Management Server, Policy Engine, Detection Servers, Protectors (Email/Web/Network), Endpoint agents (Windows/Mac)
• Implement EDM/IDM/OCR and data classification policies

2. Web Security (SWG)

• Deploy on-prem (V-series appliances) and cloud SWG/hybrid mode
• Configure transparent/explicit proxy, SSL inspection, URL filtering

3. Email Security

• Configure SMTP routing, DLP email policies, encryption & compliance rules

4. Advanced Policy Configuration

• Design/tune DLP policies (structured + unstructured data), web filtering (user/group/app-based), cloud app governance rules

5. L3 Troubleshooting & RCA (Critical)

• Handle: DLP not detecting over HTTPS, endpoint agent communication failures, web proxy latency/SSL failures, policy not applying to users, email DLP bypass
• Approach: log analysis (Policy Engine, endpoint, web), packet capture/traffic analysis, root cause identification & permanent fix

Qualifications & Certifications (Preferred)

• Bachelor's degree (IT/CS or related)
• Forcepoint Certified Administrator (FCA)
• Forcepoint DLP Specialist
• CCNA / Security+ (nice-to-have)

Zscaler Network Security Engineer | 4–7+ Years

• Manage and troubleshoot Zscaler ZIA & ZPA, including policies, URL filtering, SSL inspection, DNS security, App Segments and App Connectors.
• Troubleshoot Client Connector, PAC, GRE/IPsec tunnels and Zscaler Digital Experience issues.
• Strong knowledge of TCP/IP, DNS, DHCP, IPAM, VLAN and Ethernet switching; Infoblox experience preferred.
• Must have working experience in one of: Palo Alto Firewall, Cisco LAN/Wi-Fi, or Cisco SD-WAN.
• Handle incidents, changes, SLA/KPI, ITIL processes, documentation and L3 escalations.
• Willingness to work in rotating/follow-the-sun shifts.

Job Title: AppSec / AI Security Engineer

Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)

About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

Key Responsibilities

• Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
• Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
• Develop structured code review workflows incorporating specifications, scan results, and code provenance.
• Optimize security scanning tools to reduce false positives and drive developer adoption.
• Investigate and manage security findings using established remediation and documentation processes.
• Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
• Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.

Required Skills & Experience

• Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
• Experience implementing automated security scanning and enforcement — not just operating existing tools.
• Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
• Ability to design, build, and own security automation and governance solutions from the ground up.
• Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
• Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
• Strong analytical mindset and ability to independently assess security risk across internal and external codebases.

Preferred Qualifications

• ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
• Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
• Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
• AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
• Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
• Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).

About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

For more info, please visit our website:  https://5exceptions.com

Greeting from Nam info!

We have a job opportunity for FortiGate Firewall , interested candidate & Kindly share your updated cv

Role description: FortiGate Firewall

Exp : 5+years

Work Location : Mumbai

Notice period : Immediate -15Days

Key Responsibilities

FortiGate Firewall Operations & Management

• Deploy, and maintain enterprise FortiGate firewall infrastructure and Security Fabric
• Configure and optimize FortiGate security policies, NAT rules, and traffic shaping
• Manage Forti Manager for centralized policy management and Forti Analyzer for logging and reporting
• Implement and maintain FortiGate high availability (HA) clusters and virtual domains (VDOMs)
• Perform advanced troubleshooting using FortiGate CLI and diagnostic tools
• Manage FortiGate firmware upgrades, patches, and security updates F5 BIG-IP Administration & Optimization
• Configure and maintain F5 BIG-IP systems including LTM, GTM, ASM, and APM modules
• Design advanced load balancing configurations with custom health monitors and persistence
• Implement SSL/TLS termination, certificate management, and SSL offloading strategies
• Develop and maintain complex iRules for application-specific traffic management
• Configure F5 Application Security Manager (ASM) policies and web application firewall rules
• Manage F5 Access Policy Manager (APM) for secure remote access and authentication
• Perform F5 system maintenance, upgrades, and disaster recovery procedures Technical Leadership & Incident Response
• Serve as Level 3 escalation point for complex FortiGate and F5 technical issues
• Lead critical incident response for security breaches and application delivery failures
• Conduct root cause analysis and implement preventive measures
• Develop technical documentation, runbooks, and knowledge base articles
• Participate in 24/7 on-call rotation for emergency response.

Required Technical Skills Qualifications

Expert-level FortiGate proficiency:

• FortiOS configuration and management
• FortiManager and FortiAnalyzer administration
• Security Fabric implementation and management
• VPN technologies (SSL VPN, IPSec)
• VDOM configuration and management
• FortiGate clustering and high availability.

Advanced F5 BIG-IP expertise:

• Local Traffic Manager (LTM) advanced configurations
• Global Traffic Manager (GTM) for DNS load balancing
• Application Security Manager (ASM) policy management
• Access Policy Manager (APM) implementation
• iRules development and troubleshooting
• SSL certificate lifecycle management
• Strong understanding of network protocols (TCP/IP, HTTP/HTTPS, DNS)
• Experience with network packet analysis and troubleshooting tools
• Knowledge of application delivery and web application security concepts

Certifications

• Fortinet Network Security Expert (NSE 7 or NSE 8)
• F5 Certified Technology Specialist (F5-CTS)
• F5 Certified Solution Expert (F5-CSE) - Highly Preferred
• Fortinet NSE 4 Security Professional

Sandhya D

Senior Executive Staffing

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.