Cutshort logo
For Employers
NeoGenCode Technologies Pvt Ltd logo
Senior Security Engineer – ServiceNow Security & Threat Modelling
Senior Security Engineer – ServiceNow Security & Threat Modelling

Senior Security Engineer – ServiceNow Security & Threat Modelling at NeoGenCode Technologies Pvt Ltd · Remote only · 5 - 10 years · ₹8L - ₹18L / yr · Raised funding · Remote only · Posted 22 May 2026

NeoGenCode Technologies Pvt Ltd's logo

Senior Security Engineer – ServiceNow Security & Threat Modelling

Akshay Patil's profile picture
Posted by Akshay Patil
5 - 10 yrs
₹8L - ₹18L / yr
Remote only
Skills
ServiceNow
ServiceNow platform security
Threat modeling
STRIDE
PASTA
SAST
DAST
Checkmarx
Veracode
Burp suite
ZAP
API security
OAuth
SAML
SSO
CI/CD
skill iconJavascript
skill iconPython
Static Application Security Testing
Dynamic testing
Static testing

Job Title : Senior Security Engineer – ServiceNow Security & Threat Modelling

Experience : 6+ Years

Location : Remote

Type : Contract


Job Summary :

We’re looking for a Senior Security Engineer to strengthen our ServiceNow ecosystem with security-by-design.

You will lead threat modelling, perform security design reviews, embed security in SDLC, and ensure risks are mitigated across applications and integrations.


Mandatory Skills :

ServiceNow platform security, threat modelling (STRIDE/PASTA), SAST/DAST (Checkmarx/Veracode/Burp/ZAP), API security, OAuth/SAML/SSO, secure CI/CD, JavaScript/Python.


Key Responsibilities :

  • Drive threat modelling, design reviews, and risk assessments.
  • Implement & manage SAST/DAST, secure CI/CD pipelines, and automated scans.
  • Collaborate with Dev/DevOps teams to instill secure coding practices.
  • Document findings, conduct vendor reviews & support ITIL-driven processes.
  • Mentor teams on modern security tools and emerging threats.

Required Skills :

  • Strong expertise in ServiceNow platform security & architecture.
  • Hands-on with threat modelling (STRIDE/PASTA, attack trees).
  • Experience using SAST/DAST tools (Checkmarx, Veracode, Burp Suite, OWASP ZAP).
  • Proficiency in API & Web Security, OAuth, SAML, SSO.
  • Knowledge of secure CI/CD pipelines & automation.
  • Strong coding skills in JavaScript/Python.
  • Excellent troubleshooting & analytical abilities for distributed systems.

Nice-to-Have :

  • Certifications: CISSP, CEH, OSCP, CSSLP, ServiceNow Specialist.
  • Knowledge of cloud security (AWS/Azure/GCP) & compliance frameworks (ISO, SOC2, GDPR).
  • Experience with incident response, forensics, SIEM tools.
Read more
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos

About NeoGenCode Technologies Pvt Ltd

Founded :
2023
Type :
Services
Size :
20-100
Stage :
Raised funding

About

Welcome to Neogencode Technologies, an IT services and consulting firm that provides innovative solutions to help businesses achieve their goals. Our team of experienced professionals is committed to providing tailored services to meet the specific needs of each client. Our comprehensive range of services includes software development, web design and development, mobile app development, cloud computing, cybersecurity, digital marketing, and skilled resource acquisition. We specialize in helping our clients find the right skilled resources to meet their unique business needs. At Neogencode Technologies, we prioritize communication and collaboration with our clients, striving to understand their unique challenges and provide customized solutions that exceed their expectations. We value long-term partnerships with our clients and are committed to delivering exceptional service at every stage of the engagement. Whether you are a small business looking to improve your processes or a large enterprise seeking to stay ahead of the competition, Neogencode Technologies has the expertise and experience to help you succeed. Contact us today to learn more about how we can support your business growth and provide skilled resources to meet your business needs.

Read more

Candid answers by the company

What does the company do?
What is the location preference of jobs?

IT & Engineering Talent Staffing

  • Provides full-time and contract-based hiring, delivering handpicked, pre‑screened developers across tech stacks—ranging from web, mobile, AI/ML, Web3/blockchain.
  • Maintains a bench o vetted candidates, offering fast delivery of interview-ready profiles—often within 24 hours.
  • Offers payroll management, handling compliance, tax, attendance, and documentation for both contractors and full-time employees.

2. End-to-End Project Delivery

  • Delivers full-stack development solutions: web, mobile, cloud, AI/ML, Blockchain/Web3.
  • Manages entire project lifecycle—requirements gathering, design (UI/UX), development, deployment, and ongoing support .

3. Additional Offerings

  • Expands into cybersecurity consulting, digital marketing, and cloud platform services (like AWS, GCP, Azure) .
  • Provides strategic IT consulting to align technology solutions with business objectives

Company social profiles

bloginstagramlinkedinfacebook

Similar jobs (10)

Five exceptions Software Solution
Neha Daka
Posted by Neha Daka
Indore
4 - 8 yrs
₹3.5L - ₹10L / yr
ApplicationSecurity,Cybersecurity, DevSecOps,CI/CD
DAST
SAST
Cloud Computing

Job Title: AppSec / AI Security Engineer


Employment Type: Full-time/ Permanent

Location: Indore (Work from Office)


About the Role

We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.

If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.

 

Key Responsibilities

  • Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
  • Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
  • Develop structured code review workflows incorporating specifications, scan results, and code provenance.
  • Optimize security scanning tools to reduce false positives and drive developer adoption.
  • Investigate and manage security findings using established remediation and documentation processes.
  • Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
  • Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.


Required Skills & Experience

  • Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
  • Experience implementing automated security scanning and enforcement — not just operating existing tools.
  • Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
  • Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
  • Ability to design, build, and own security automation and governance solutions from the ground up.
  • Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
  • Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
  • Strong analytical mindset and ability to independently assess security risk across internal and external codebases.


Preferred Qualifications

  • ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
  • Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
  • Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
  • AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
  • Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
  • Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).


About Company:

Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.

 

For more info, please visit our website:  https://5exceptions.com

Read more
Risosu Consulting LLP
at Risosu Consulting LLP
1 candid answer
Vandana Saxena
Posted by Vandana Saxena
Pune, Bengaluru (Bangalore), Noida, Hyderabad, Chennai, trivendam, Chandigarh, Kolkata, Mumbai
5 - 8 yrs
₹12L - ₹18L / yr
Vulnerability assessment
Vulnerability management
Burp suite
Fortify
sonarqube
+2 more

Responsibilities

  • Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
  • Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
  • Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
  • Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
  • Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
  • Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
  • Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
  • Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
  • Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
  • Provide input into policies and standards related to application and cloud security controls.


Qualifications and Education Requirements

  • Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
  • 5-7 years of relevant experience in application security and/or vulnerability management.
  • Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
  • Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
  • Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
  • Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
  • Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
  • Excellent documentation, communication, and stakeholder engagement skills.


Desired Skills

  • Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
  • Experience using the ServiceNow platform for vulnerability or incident tracking.
  • Proficiency in Azure cloud and Azure DevOps environments.
  • Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.
Read more
CLOUDSUFI
at CLOUDSUFI
3 recruiters
Ayushi Dwivedi
Posted by Ayushi Dwivedi
Remote only
8 - 14 yrs
₹40L - ₹50L / yr
Network Security
Application Security
GRC
WAF
SAST
+2 more

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com


Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.


Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/


Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years


ABOUT YOU

  • 5+ years’ experience with AWS orchestration via Terraform script
  • 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
  • 5+ years’ experience with AWS WAF
  • 4+ years’ experience with CloudFlare
  • 3+ years’ experience with DataDog
  • Experience with PagerDuty
  • Ability to make nuanced threat assessments
  • Experience in SOPHOS.
  • Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
  • Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
  • Hands-on experience implementing various security tools in CI/CD pipeline
  • Strong experience with any cloud service provider (AWS Preferred)
  • Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
  • Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
  • Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
  • Penetration testing and container security.
  • Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
  • Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
  • Creating and managing security strategies
  • Oversee information security audits, whether performed by organization or third-party personnel
  • Develop, maintain and publish up-to-date information security policies, standards and guidelines.
  • Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

  • Work independently with vendors and collaborate with colleagues
  • Experience negotiating remediation timelines and/or remediate found issues independently
  • Ability to implement vendor platforms within CI/CD pipelines
  • Experience managing/responding to incidents, collecting evidence, and making decisions.
  • Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
  • Multitasking and continuous ability to provide a high level of concentration for assigned projects.
  • Good working knowledge of AWS security in general and familiarity of the AWS native security tools
  • The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
  • Ability to create DevSecOps security requirements while working on a project
  • Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers



Read more
Remote only
5 - 10 yrs
₹18L - ₹18L / yr
ServiceNow
GRC
skill iconJavascript
ACL

ServiceNow USEM Technical Consultant -(Offshore) Contract Role

· Location- Remote

· Contract- 6 months

Job Description

Position Description:  

The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations. 

Primary Responsibilities: 

Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.

Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.

Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.

Handle update set management and oversee code promotion across development, test, and production instances.

 


Requirements

Qualifications: 

· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects

· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod

· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes

· Experience configuring notifications and inbound email actions, including email-actionable approvals

· Experience with ACL configuration and understanding of role-based access design

· Experience with SLA definitions and task-based SLA behavior

· Experience with Service Catalog record producers and Employee Center / Service Portal configuration

· Proficiency with update set management and promotion across development, test, and production instances

· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 


· Work Experience: 5+ years

· Industry: Technology

 

Read more
Rampwork
Remote only
5 - 15 yrs
₹30L - ₹70L / yr
Cyber Security
Web application security
Penetration testing
skill iconPython
skill iconJava
+2 more

Cybersecurity Engineer – AI Training Project


About the Opportunity

We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.

In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.


What You’ll Do

  • Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
  • Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
  • Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
  • Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
  • Implement new features and fix existing functionality while maintaining strong security and engineering standards.
  • Refactor legacy code to improve security, maintainability, reliability, and performance.
  • Work on backend systems and help optimize applications for scalability, performance, and security.
  • Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
  • Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
  • Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.


What We’re Looking For

  • Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
  • Strong programming experience in one or more of:
  • Python
  • Java
  • Rust
  • Go
  • C++
  • TypeScript
  • Proven experience with debugging, troubleshooting, and fixing complex software issues.
  • Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
  • Understanding of secure software development practices and modern security threats.
  • Strong knowledge of data structures, algorithms, software architecture, and code quality.
  • Ability to review unfamiliar codebases and quickly understand how systems work.
  • Strong written communication and the ability to explain complex technical findings clearly.


Nice to Have

  • Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
  • Experience performing security assessments on production applications or enterprise systems.
  • Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
  • Contributions to open-source security or software projects.
  • Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
  • Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.


Engagement

  • Role: Cybersecurity Engineer
  • Work: Remote(Contract)
  • Experience: Mid-level to Senior
  • Programming: Required
  • Cybersecurity expertise: Required


Why Join?

This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.


If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.

Read more
StrideOne
Aakanksha Jain
Posted by Aakanksha Jain
Gurugram
2 - 3 yrs
₹10L - ₹15L / yr
Microservices
skill iconPython
Google Cloud Platform (GCP)
Windows Azure
skill iconAmazon Web Services (AWS)

About StrideOne:

StrideOne is a unified tech-enabled financial platform and NBFC focused on enabling MSMEs and SMEs through structured credit solutions, receivables financing, and receivables management. We are designed to simplify access to capital, improve cash flow visibility, and support risk-aware financial decision-making for growing businesses across industries. With a steadily growing disbursement footprint, an expanding anchor network, and established partnerships with multiple lending institutions, StrideOne is entering its next phase of growth. The organisation is building a financial ecosystem that combines lending, receivables management, and data-driven workflows, positioning itself to scale sustainably while maintaining strong governance, portfolio quality, and operational discipline.


Key Responsibilities:

Architect & Design: Design and implement highly scalable, available, and secure web applications. You’ll be responsible for designing multi-tenant architectures, ensuring data isolation, and leveraging modern cloud infrastructure to ensure the platform scales efficiently.


Security Focused Development: Develop and enforce secure coding standards and best practices for cloud-based applications and APIs. Conduct regular code reviews with a focus on security vulnerabilities.


API & Microservices Design: Design and implement secure, scalable, and maintainable APIs and microservices that integrate seamlessly with the platform. Ensure the use of best practices for service discovery, communication, and fault tolerance.


Performance Optimization: Identify and resolve performance bottlenecks in the application and infrastructure, ensuring scalability and responsiveness under varying load conditions.


Compliance & Regulatory Requirements: Ensure that applications comply with industry standards and regulations (e.g., GDPR, HIPAA, SOC 2, ISO 27001). Assist with audits and security certifications.


Collaboration & Leadership: Work closely with product managers, QA engineers, and other stakeholders to define and implement new features and improvements. Collaborate with the infrastructure team to ensure seamless deployment and scaling of the application. Also mentor and guide junior engineers on secure coding practices and development techniques.


Security Automation & Monitoring: Implement logging, monitoring, and alerting systems to continuously assess the security posture of the application. Stay up to date with the latest security trends, vulnerabilities, and best practices. Promote security awareness and training within the engineering team.


Qualifications:

Experience: 2+ years of experience in software engineering, with a focus on developing secure and scalable multi-tenant web applications with customer data isolation and tenant-specific configurations.


Tech Stack: Proficiency in modern web technologies (Python is a plus), relational databases, and cloud platforms (AWS, Azure, GCP).


Microservices Architecture: Strong experience designing and developing microservices-based architectures. Familiarity with service discovery, API Gateway, inter-service communication, and distributed systems principles.


Scalability & Performance: Experience with designing highly scalable and performant systems. Knowledge of caching, database sharding, partitioning, and high-throughput systems.


Security Expertise: Understanding of cloud security principles, cryptography, identity and access management (IAM), and secure coding practices.


Analytical Skills: Strong problem-solving skills with the ability to analyze complex security issues and provide practical solutions.


Soft Skills: Strong communication skills with the ability to explain complex technical concepts to non-technical stakeholders. Experience working in agile, collaborative environments.

Read more
Hiring for IT Product based (MNC)
Hiring for IT Product based (MNC)
Agency job
Pune
8 - 12 yrs
₹30L - ₹45L / yr
Technical Architect
skill icon.NET
skill iconReact.js
Technical Architecture

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

Read more
Gurugram
8 - 12 yrs
₹20L - ₹30L / yr
Information security
GRC
Cyber Security
cloud security
CISM
+5 more

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor


Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.


Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.




mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743


website: www.glansolutions.com

Read more
Bengaluru (Bangalore)
6 - 12 yrs
₹18L - ₹20L / yr
Netskope
SSE
Implementation
Configuration
Technical Consultant
+7 more

Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)

Company: Inflow Technologies

Location: Bangalore (Work From Office, 5 days/week)


About Inflow Technologies:

Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.


Position Overview:

We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.


Key Responsibilities:

Implementation & Deployment

  • Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
  • Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
  • Perform agent rollout across Windows, Mac, and Mobile

Architecture & Design

  • Design a secure access architecture for remote users, branch offices, and cloud workloads
  • Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
  • Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
  • Configure SSO/SAML authentication


Required Qualifications:

  • Bachelor's degree in IT/CS or related field
  • 6–8 years of experience (L3 level)
  • Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)


Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)






Read more
Appknox
at Appknox
1 video
6 recruiters
Vasudha Srivastav
Posted by Vasudha Srivastav
Bengaluru (Bangalore)
2 - 4 yrs
Best in industry
Bug Bounty
Exploit Development
Agent Driven Pentesting
Reverse engineering
Penetration testing
+6 more

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.



The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.


What An Ideal Candidate Would Look Like: 

  • Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
  • Technology Stack: AWS, GCP, Objective C, Java, Python
  • Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities


Minimum Requirements

  • 2-4+ years of experience in application security and vulnerability research
  • Strong foundation in mobile app security - Android or Ios
  • Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
  • Strong understanding of exploit mitigations and proven ability to bypass them
  • Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
  • Develop AI-driven agents to automate dynamic analysis
  • Should be able to Leverage AI/LLMs to augment Pentesting efforts
  • Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables


Good to have Requirements

  • Understanding of AI/ML security risks


Responsibilities

  • Security assessment of web/mobile applications on various platforms
  • Focusing on Mobile Application Security Research for new vulnerabilities
  • Static and Dynamic Code Analysis
  • Develop and interpret security standards and guides
  • Automation of exploit development 
  • Understand and explain the results with impact on business and compliance status
  • Continuously learning and training on latest tools and technique


Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.


Within 3 months

Actively contributing in exploit development and automation of it with the team.


Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.


Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.


Personality traits we really admire

  • A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
  • Great attitude to ask questions, learn and suggest process improvements.
  • Has attention to details and helps identify edge cases.
  • Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
  • Follow timelines and absolute commitment to deadlines.


Interview Process - would be team specific

  • Round 1- CTF round 
  • Round 2 -Profile Evaluation; HR
  • Round 3 -Technical Interview with security team members
  • Round 4 -Technical Interview with the Hiring Manager
  • Round 5 -Technical round with CTO
  • Round 6 -HR Round


Compensation

  • As per Industry Standards


Why Join Us

  • Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
  • Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
  • Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
  • Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.


Read more
Why apply to jobs via Cutshort
people_solving_puzzle
Personalized job matches
Stop wasting time. Get matched with jobs that meet your skills, aspirations and preferences.
people_verifying_people
Verified hiring teams
See actual hiring teams, find common social connections or connect with them directly.
ai_chip
Move faster with AI
We use AI to get you faster responses, recommendations and unmatched user experience.
Did not find a job you were looking for?
icon
Search for relevant jobs from 10000+ companies such as Google, Amazon & Uber actively hiring on Cutshort.
companies logo
companies logo
companies logo
companies logo
companies logo
Get to hear about interesting companies hiring right now
Company logo
Company logo
Company logo
Company logo
Company logo
Linkedin iconFollow Cutshort
Users love Cutshort
Read about what our users have to say about finding their next opportunity on Cutshort.
Shubham Vishwakarma's profile image

Shubham Vishwakarma

Full Stack Developer - Averlon
I had an amazing experience. It was a delight getting interviewed via Cutshort. The entire end to end process was amazing. I would like to mention Reshika, she was just amazing wrt guiding me through the process. Thank you team.
Companies hiring on Cutshort
companies logos