Senior Cyber Security Consultant

Job Overview

We are looking for an experienced Cyber Security professional with 5+ years of hands-on experience in VAPT, security assessments, cloud security, Active Directory security, and compliance. The candidate will be responsible for conducting security assessments, identifying risks, ensuring compliance with security standards, and providing remediation guidance to clients.

Key Responsibilities

• Conduct Web Application, API, Network, Infrastructure, and Mobile Application VAPT.
• Perform internal and external penetration testing and Active Directory security assessments.
• Identify, validate, and document security vulnerabilities with remediation recommendations.
• Conduct Cloud Security assessments across AWS, Azure, and GCP environments.
• Perform security audits, risk assessments, and compliance gap assessments.
• Assist clients in implementing security controls and meeting compliance requirements.
• Prepare detailed technical reports and executive-level security assessment reports.
• Lead security assessments and coordinate with clients and internal teams.
• Review security configurations, architecture, and technical controls.
• Provide guidance and mentorship to junior security engineers.

Technical Requirements

• 5+ years of hands-on experience in Cyber Security, VAPT, and Security Assessments.
• Strong understanding of OWASP Top 10, API Security, and common attack methodologies.
• Expertise in Active Directory security, privilege escalation, and internal network penetration testing.
• Strong knowledge of Linux, Windows, Networking, and security technologies.
• Experience with Cloud Security assessments (AWS/Azure/GCP).
• Familiarity with tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, and Kali Linux.
• Strong vulnerability analysis, exploitation, and remediation skills.

Compliance & Security Frameworks

• Knowledge and experience with ISO 27001/27002.
• Understanding of SOC 2 requirements and security controls.
• Familiarity with PCI DSS, NIST Cybersecurity Framework, and CIS Benchmarks.
• Experience in security audits, compliance assessments, risk management, and control validation.
• Ability to assist in compliance documentation, evidence collection, and remediation tracking.
• Knowledge of GDPR and other relevant security and privacy regulations is an advantage.

Preferred Certifications

• OSCP / OSCP+
• CEH / CEH Master
• CISSP
• CISA / CISM
• ISO 27001 Lead Auditor / Lead Implementer
• CREST or other relevant security certifications

Candidate Expectations

• Strong analytical, problem-solving, and communication skills.
• Ability to independently manage security assessments and client engagements.
• Experience in technical report writing and presenting security findings.
• Ability to work with cross-functional teams and provide actionable security recommendations.
• Demonstrated practical knowledge through real-world projects and assessments.

You will lead Application Security and VAPT initiatives and own the full security testing lifecycle. You’ll also help the company’s applications meet the strict security standards required for defence industry certifications.

What You’ll Do

• Run end-to-end VAPT on web apps, APIs, and cloud environments, finding logic flaws, access control issues, and OWASP Top 10 vulnerabilities
• Set up and manage Semgrep in the CI/CD pipeline for static analysis, taint tracking, and secure code reviews
• Run automated and manual DAST scans with OWASP ZAP to simulate real-world attacks
• Validate security controls against defence and government compliance frameworks, and prepare technical evidence and PoCs for external audits
• Work with engineering teams to triage findings, guide fixes, and re-test before production releases

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline