Senior Security Engineer – ServiceNow Security & Threat Modelling

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

ServiceNow USEM Technical Consultant -(Offshore) Contract Role

· Location- Remote

· Contract- 6 months

Job Description

Position Description:  

The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations. 

Primary Responsibilities: 

Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.

Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.

Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.

Handle update set management and oversee code promotion across development, test, and production instances.

Requirements

Qualifications: 

· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects

· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod

· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes

· Experience configuring notifications and inbound email actions, including email-actionable approvals

· Experience with ACL configuration and understanding of role-based access design

· Experience with SLA definitions and task-based SLA behavior

· Experience with Service Catalog record producers and Employee Center / Service Portal configuration

· Proficiency with update set management and promotion across development, test, and production instances

· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 

· Work Experience: 5+ years

· Industry: Technology

Cybersecurity Engineer – AI Training Project

About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.

What You’ll Do

• Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
• Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
• Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
• Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
• Implement new features and fix existing functionality while maintaining strong security and engineering standards.
• Refactor legacy code to improve security, maintainability, reliability, and performance.
• Work on backend systems and help optimize applications for scalability, performance, and security.
• Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
• Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
• Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.

What We’re Looking For

• Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
• Strong programming experience in one or more of:
• Python
• Java
• Rust
• Go
• C++
• TypeScript
• Proven experience with debugging, troubleshooting, and fixing complex software issues.
• Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
• Understanding of secure software development practices and modern security threats.
• Strong knowledge of data structures, algorithms, software architecture, and code quality.
• Ability to review unfamiliar codebases and quickly understand how systems work.
• Strong written communication and the ability to explain complex technical findings clearly.

Nice to Have

• Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
• Experience performing security assessments on production applications or enterprise systems.
• Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
• Contributions to open-source security or software projects.
• Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
• Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.

Engagement

• Role: Cybersecurity Engineer
• Work: Remote(Contract)
• Experience: Mid-level to Senior
• Programming: Required
• Cybersecurity expertise: Required

Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.

If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

Lead Data Security Solution Engineer

Exp: 10+ years

Rate: 35 LPA

Location: Remote

Time zone: ET (US Eastern time)

Shift: Night Shift

Type: Fulltime​

Responsibilities:

1. Technical and Database Assessment

Review Data In-Licensing requirements, workflow maps, data flows, data lineage, entitlement rules, and dependency records.

Assess relational database platforms, schemas, connectivity methods, interfaces, drivers, service identities, query patterns, and downstream consumption.

Identify where licensed data is stored, transformed, replicated, extracted, cached, archived, or backed up.

Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.

2. Data-Level Authentication and Identity Integration

Assess authentication for named users, service identities, workloads, and analytical tools accessing databases.

Evaluate OAuth/OIDC or other identity- and token-based authentication directly to the database where supported by the selected technology.

Design integration between enterprise identities, security groups, project groups, database principals, roles, and policy engines.

Reduce reliance on shared or long-lived credentials where feasible and define secure credential or token handling for unavoidable exceptions.

Align with tools currently available and identify gaps if any,

3. Fine-Grained Authorization and Data Firewalling

Design database-level controls that restrict access to explicitly authorized users, groups, services, projects, or licensing populations.

Design and implement row-level security, column-level security, dynamic masking, views, policy-based filtering, or equivalent controls as appropriate.

Define isolation patterns for different licensed datasets and agreements while preserving permitted platform use for other users.

Ensure controls are consistently enforced as close to the data layer as technically feasible and are not solely dependent on application logic.

4. Auditing, Monitoring, and Traceability

Design database auditing to capture who accessed data, what was accessed, when access occurred, and which identity or service was used.

Define logging for queries, exports, failed access attempts, permission changes, and privileged activity where supported and required.

Integrate audit telemetry with appropriate monitoring and reporting capabilities and define retention and evidence requirements.

Validate that audit records are searchable, attributable, protected from inappropriate modification, and useful for investigation.

5. Data Lifecycle, Revocation, and Deletion

Design controls for access revocation when users change roles, leave a project, or when licensing rights expire.

Design methods to identify and remove licensed data from primary stores and relevant downstream copies, extracts, caches, or derived stores.

Address deletion implications for referential integrity, backups, archives, replication, recovery processes, and downstream consumers.

Define validation, exception handling, and evidence mechanisms to demonstrate that required deletion activities were completed.

6. Solution Architecture and Engineering

Translate requirements into current-state and target-state architectures, technical specifications, security patterns, and implementation plans.

Compare solution options and document trade-offs across security, feasibility, performance, scalability, operability, cost, and technology constraints.

Define database connectivity, policy-enforcement, identity, audit, monitoring, lifecycle, and integration components.

Collaborate with database, IAM, security architecture, infrastructure, application, data platform, governance, and scientific teams.

7. POC Design and Execution

Select suitable relational database and workflow candidates that represent Data In-Licensing scenarios and material technical risks.

Define POC architecture, test data, test identities, success criteria, negative tests, performance considerations, and rollback approach.

Implement and validate identity-based authentication, fine-grained authorization, data firewalling, auditing, access revocation, and deletion scenarios.

Document outcomes, limitations, operational considerations, reusable patterns, and recommendations for broader adoption.

What we expect:

Expected Deliverables

Technical assessment of databases, integrations, identities, and data flows

Current-state database security and capability assessment

Target-state data security architecture and detailed technical design

Database authentication and identity-integration design

Row-level, column-level, masking, and policy-enforcement design

Data firewalling and licensed-dataset isolation pattern

Audit, monitoring, traceability, and reporting design

Access revocation, retention, lifecycle, and deletion design

Solution options, feasibility, gap, dependency, and risk assessment

POC architecture, implementation, test results, and recommendations

Reusable implementation patterns and operational handover documentation

Required Technical Skills and Experience

Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, privileges, and access paths.

Practical experience implementing database-level authorization, including row-level and column-level controls or equivalent fine-grained mechanisms.

Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.

Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines.

Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.

Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications.

Ability to evaluate heterogeneous database technologies and design platform-appropriate controls.

Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills.

Nice to have:

Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies.

Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or another regulated environment.

Experience designing and executing security POCs and converting validated patterns into production-ready designs.

Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data.

LEAD DATA SECURITY SOLUTION ENGINEER

Experience: 10+ Years

Location: Remote

Employment Type: Full-Time

Budget: Up to ₹35 LPA

Time Zone: US Eastern Time (ET)

Shift: US ET Night Shift

Job Description

We are looking for an experienced Lead Data Security Solution Engineer with strong expertise in database security, IAM, authentication, authorization, and enterprise data architecture.

The candidate will be responsible for assessing existing database environments, designing secure data access architectures, implementing fine-grained authorization controls, and ensuring licensed data is protected throughout its lifecycle.

The role involves working closely with database, IAM, security, infrastructure, application, data platform, and governance teams.

Key Responsibilities

1. Technical and Database Assessment

• Assess database platforms, schemas, data flows, data lineage, connectivity, and downstream dependencies.
• Review where licensed data is stored, transformed, replicated, extracted, cached, archived, and backed up.
• Evaluate existing database security capabilities and identify gaps, risks, and technical constraints.

2. Authentication and Identity Integration

• Design secure authentication for users, applications, service identities, and workloads.
• Implement or evaluate OAuth 2.0, OIDC, token-based authentication, and enterprise IAM integration.
• Integrate enterprise identities, security groups, database roles, and policy engines.
• Reduce dependency on shared and long-lived credentials.

3. Fine-Grained Authorization and Data Security

• Design and implement database-level access controls.
• Implement Row-Level Security (RLS), Column-Level Security (CLS), dynamic data masking, and policy-based filtering.
• Design secure isolation patterns for licensed datasets.
• Ensure security policies are enforced at the database layer.

4. Auditing, Monitoring, and Traceability

• Design database auditing and activity monitoring.
• Track user access, queries, exports, permission changes, and privileged activities.
• Integrate audit logs with centralized monitoring and reporting systems.
• Define audit retention and investigation requirements.

5. Data Lifecycle and Deletion

• Design access revocation mechanisms for users, projects, and expired licensing agreements.
• Define secure data deletion processes across databases, backups, archives, caches, and downstream systems.
• Ensure deletion activities are validated and supported by audit evidence.

6. Solution Architecture and Engineering

• Develop current-state and target-state security architectures.
• Prepare technical specifications, implementation plans, and reusable security patterns.
• Evaluate solution options based on security, scalability, performance, feasibility, and cost.
• Collaborate with cross-functional technical and business teams.

7. POC Design and Execution

• Design and execute Proof of Concepts (POCs) for database security scenarios.
• Validate authentication, authorization, data isolation, auditing, access revocation, and deletion.
• Document test results, technical limitations, recommendations, and implementation approaches.

Required Technical Skills

• 10+ years of experience in database engineering, data security, solution architecture, or related fields.
• Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, and privileges.
• Experience implementing Row-Level Security (RLS), Column-Level Security (CLS), dynamic masking, and fine-grained authorization.
• Strong understanding of IAM, OAuth 2.0, OIDC, token-based authentication, service identities, and workload identities.
• Experience with secrets management and secure database connectivity.
• Knowledge of database auditing, query monitoring, centralized logging, alerting, and security investigations.
• Experience securing integrations involving applications, APIs, analytical tools, and ETL/ELT pipelines.
• Understanding of data lineage, retention, lifecycle management, revocation, deletion, backup, and recovery.
• Ability to assess heterogeneous database platforms and recommend suitable security architectures.
• Strong architecture, troubleshooting, documentation, and stakeholder-management skills.

Nice to Have

• Experience with enterprise data platforms and cloud or hybrid database environments.
• Knowledge of data catalogs, access governance, and policy-enforcement technologies.
• Experience in pharmaceutical research, healthcare, scientific data, or intellectual property protection.
• Exposure to data licensing, contractual-use restrictions, and regulated environments.
• Experience designing and executing security POCs and implementing production-ready solutions.

Expected Deliverables

• Database security and capability assessment.
• Current-state and target-state security architecture.
• Database authentication and IAM integration design.
• Fine-grained authorization and data-masking design.
• Data firewalling and licensed-dataset isolation patterns.
• Audit, monitoring, and traceability framework.
• Data revocation, retention, and deletion strategy.
• Technical feasibility, gap, dependency, and risk assessments.
• POC implementation, test results, and recommendations.
• Reusable technical documentation and operational handover.

Work Requirements

• Fully remote opportunity.
• Full-time employment.
• Must be comfortable working in the US Eastern Time (ET) night shift.
• Budget: Up to ₹35 LPA.

About StrideOne:

StrideOne is a unified tech-enabled financial platform and NBFC focused on enabling MSMEs and SMEs through structured credit solutions, receivables financing, and receivables management. We are designed to simplify access to capital, improve cash flow visibility, and support risk-aware financial decision-making for growing businesses across industries. With a steadily growing disbursement footprint, an expanding anchor network, and established partnerships with multiple lending institutions, StrideOne is entering its next phase of growth. The organisation is building a financial ecosystem that combines lending, receivables management, and data-driven workflows, positioning itself to scale sustainably while maintaining strong governance, portfolio quality, and operational discipline.

Key Responsibilities:

Architect & Design: Design and implement highly scalable, available, and secure web applications. You’ll be responsible for designing multi-tenant architectures, ensuring data isolation, and leveraging modern cloud infrastructure to ensure the platform scales efficiently.

Security Focused Development: Develop and enforce secure coding standards and best practices for cloud-based applications and APIs. Conduct regular code reviews with a focus on security vulnerabilities.

API & Microservices Design: Design and implement secure, scalable, and maintainable APIs and microservices that integrate seamlessly with the platform. Ensure the use of best practices for service discovery, communication, and fault tolerance.

Performance Optimization: Identify and resolve performance bottlenecks in the application and infrastructure, ensuring scalability and responsiveness under varying load conditions.

Compliance & Regulatory Requirements: Ensure that applications comply with industry standards and regulations (e.g., GDPR, HIPAA, SOC 2, ISO 27001). Assist with audits and security certifications.

Collaboration & Leadership: Work closely with product managers, QA engineers, and other stakeholders to define and implement new features and improvements. Collaborate with the infrastructure team to ensure seamless deployment and scaling of the application. Also mentor and guide junior engineers on secure coding practices and development techniques.

Security Automation & Monitoring: Implement logging, monitoring, and alerting systems to continuously assess the security posture of the application. Stay up to date with the latest security trends, vulnerabilities, and best practices. Promote security awareness and training within the engineering team.

Qualifications:

Experience: 2+ years of experience in software engineering, with a focus on developing secure and scalable multi-tenant web applications with customer data isolation and tenant-specific configurations.

Tech Stack: Proficiency in modern web technologies (Python is a plus), relational databases, and cloud platforms (AWS, Azure, GCP).

Microservices Architecture: Strong experience designing and developing microservices-based architectures. Familiarity with service discovery, API Gateway, inter-service communication, and distributed systems principles.

Scalability & Performance: Experience with designing highly scalable and performant systems. Knowledge of caching, database sharding, partitioning, and high-throughput systems.

Security Expertise: Understanding of cloud security principles, cryptography, identity and access management (IAM), and secure coding practices.

Analytical Skills: Strong problem-solving skills with the ability to analyze complex security issues and provide practical solutions.

Soft Skills: Strong communication skills with the ability to explain complex technical concepts to non-technical stakeholders. Experience working in agile, collaborative environments.

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)

About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.

Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.

Key Responsibilities:

Implementation & Deployment

• Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
• Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
• Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

• Design a secure access architecture for remote users, branch offices, and cloud workloads
• Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
• Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
• Configure SSO/SAML authentication

Required Qualifications:

• Bachelor's degree in IT/CS or related field
• 6–8 years of experience (L3 level)
• Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)

Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)