Technical Architect- Security Analyst

The Security Analyst assists the Data Security team to help ensure the security of the company and its clients. Looking for immediate joiners.

 KEY RESPONSIBILITIES

 All employees are expected to use good business judgment and appropriate discretion and decision making while performing responsibilities of the position, and to incorporate EVA’s Core Beliefs in their daily work.

• Performs daily health checks as documented by the IT Security team.
• Supports the Security team by documenting and performing support tasks.
• Participates in change management, incident management, audit and business continuity processes.
• Plans and implements security policies and procedures to protect computer systems, networks and data from unauthorized access.
• Participates in internal and external compliance (SOC 2) audits.
• Recommends security enhancements.

Job specifics:

• Familiarity with standard security concepts, practices and procedures.
• Knowledge of Windows operating systems.
• Strong Documentation, communication skills and attention to detail.
• Able to work independently and as a part of a team to deliver completed projects on-time.
• Identifies ways to continuously improve own and/or company performance.
• Knowledge of security toolsets
• Knowledge of compliance activities (GDPR, SOC 2, ISO:27001).
• Knowledge of database security.
• Knowledge of SIEM technology and security event correlation and monitoring.
• Experience with AWS.             
• Proficient with computer software including Salesforce 

 EDUCATION & EXPERIENCE  

• Bachelor’s Degree in computer science, mathematics, Information Systems or equivalent experience preferred.
• Minimum of 3 years of hands-on IT Security & Audit experience.
• Professional IT Security Certifications are strongly preferred, such as Security+, CISSP, CISM, CISA, GSEC, etc.

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

 SOC analyst 

Location: Mumbai 

Experience: - 7 to 10 Years 

Band - 2B 

Role and Responsibilities: 

1. Develop, implement, and oversee the organization's comprehensive security strategy. 
2. Lead and mentor a team of security analysts to ensure high performance and professional growth. Act as a trusted advisor to executive leadership on security matters and emerging threats. 

• Threat Monitoring & Incident Response: 
• Oversee the detection and analysis of cybersecurity threats and vulnerabilities. 
• Manage the incident response process, ensuring timely identification, mitigation, and reporting of security incidents. 
• Collaborate with cross-functional teams to perform root cause analyses and implement corrective actions. 
• Risk Management & Compliance: 
• Conduct regular risk assessments and audits to ensure compliance with industry regulations and standards (e.g., ISO 27001, GDPR, SOC 2). 
• Implement and enforce policies, procedures, and controls to minimize risks and maintain compliance. 

1. Collaborate with legal and compliance teams to address security-related legal or regulatory requirements 

• Tools & Technology Management: 
• Evaluate, recommend, and implement security tools and technologies to strengthen defenses. 
• Oversee the configuration, maintenance, and monitoring of security infrastructure, including firewalls, SIEM systems, and endpoint protection tools. 
• Ensure the security of cloud platforms, networks, and on-premises systems. 
• Training & Awareness: 
• Develop and lead employee security awareness programs to promote a culture of security. 
• Stay current on emerging security trends and technologies to anticipate potential risks. 
• Vendor & Stakeholder Management: 
• Liaise with external vendors, consultants, and auditors to enhance security measures. 
• Build strong relationships with internal stakeholders to align security initiatives with business objectives. 

Role Overview

We are looking for an experienced Network Security Engineer to design, implement, maintain, and secure enterprise network infrastructure. The role requires a strong understanding of network security principles, hands-on experience with security technologies, and the ability to troubleshoot complex network and security issues.

The ideal candidate will work closely with network, infrastructure, cloud, application, and security teams to ensure secure, resilient, and highly available network environments. The candidate should be comfortable handling security incidents, performing root-cause analysis, implementing security controls, and contributing to continuous improvement of the organization's network security posture.

Key Responsibilities

• Design, implement, configure, and maintain enterprise network security infrastructure.
• Manage and support network security technologies including firewalls, VPNs, IDS/IPS, secure gateways, and network access controls.
• Configure and maintain security policies, access rules, NAT, VPN tunnels, and related network security controls.
• Monitor network traffic and security events to identify potential threats, anomalies, and unauthorized access.
• Troubleshoot complex network connectivity and security-related issues and perform root-cause analysis.
• Investigate and respond to network security incidents in coordination with security and infrastructure teams.
• Review firewall and network security rules regularly and ensure they follow established security standards and business requirements.
• Support secure connectivity across data centers, corporate networks, remote locations, cloud environments, and third-party networks.
• Participate in network security assessments, vulnerability remediation, and security hardening activities.
• Implement and maintain network segmentation and access-control mechanisms.
• Work with internal teams to assess security requirements for new applications, infrastructure, and network changes.
• Participate in change management, implementation, and post-change validation activities.
• Maintain network security documentation, architecture diagrams, configurations, and operational procedures.
• Contribute to security improvement initiatives, automation, standardization, and operational efficiency.
• Work with vendors and technology partners for issue resolution, upgrades, and technical escalations.
• Ensure network security operations align with organizational policies, industry standards, and compliance requirements.

Required Skills

• Strong experience in network security engineering and enterprise networking.
• Good understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, routing, switching, VLANs, and network protocols.
• Hands-on experience with enterprise firewalls and security gateways.
• Strong understanding of VPN technologies, IPsec, SSL/TLS, NAT, and access-control policies.
• Experience with IDS/IPS, network monitoring, traffic analysis, and security event investigation.
• Experience troubleshooting network and security issues across complex environments.
• Good understanding of network security architecture, segmentation, and secure connectivity.
• Experience with incident management, change management, and root-cause analysis.
• Familiarity with security best practices, vulnerability management, and network hardening.
• Strong analytical, troubleshooting, and problem-solving skills.
• Good written and verbal communication skills with the ability to work effectively with technical and non-technical stakeholders.

Preferred Skills

• Experience with security technologies from vendors such as Palo Alto, Fortinet, Cisco, Check Point, or similar.
• Exposure to cloud networking and cloud security across AWS, Azure, or GCP.
• Knowledge of Zero Trust, SASE, SD-WAN, or network access control concepts.
• Experience with security monitoring/SIEM platforms.
• Exposure to scripting or automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CCNA/CCNP Security, PCNSE, Fortinet certifications, or equivalent are an advantage.

Key Competencies

• Network Security Engineering
• Enterprise Network Troubleshooting
• Firewall & VPN Management
• Security Incident Handling
• Network Monitoring & Analysis
• Security Hardening
• Root-Cause Analysis
• Risk & Vulnerability Awareness
• Change & Configuration Management
• Stakeholder Communication
• Problem Solving
• Documentation & Process Discipline

About the role

You will create and validate the detection content that protects our customers: IDPS signatures, application control rules, and DLP rules. This is a hands-on role in our security lab, where you will generate real attack traffic, research vulnerabilities and applications, and make sure every rule is accurate, effective, and ready for production.

What you'll do

Write security rules

• Write IDPS signatures for exploits, malware, command-and-control traffic, and network attacks, with the right severity, action (alert / block / reject), and protocol scope
• Build application control rules to identify and control social media, streaming, file sharing, remote access, unsanctioned SaaS, and AI tools
• Create DLP rules to detect sensitive data (personal and financial data, confidential documents, source code) across web, email, and file transfer channels

Test and validate

• Set up test scenarios in our lab and generate traffic using browsers, command-line tools, packet captures, and safe proof-of-concept exploits
• Confirm that each rule triggers and that logs show the correct rule, severity, action, and source
• Test against normal everyday traffic to find and fix false positives before rules ship
• Build and maintain a repeatable test set so rules keep working after product updates

Research and document

• Track new CVEs, exploit techniques, and emerging applications, and turn them into working detections
• Study public r
• Study public rulesets to learn coverage patterns and find gaps in our own
• Write a short validation note for each batch: what it detects, how it was tested, and what it doesn't cover

What we're looking for

• 2-5 years of hands-on experience writing detection rules or signatures with Snort, Suricata, Zeek, YARA, Sigma, or similar
• Strong networking fundamentals: TCP/IP, HTTP/HTTPS, DNS, TLS, and packet analysis with Wireshark or pcap tools
• Experience testing rules with PoC exploits and tuning them to reduce false positives
• Exposure to CVE and vulnerability research, with the ability to read advisories and turn them into detections
• Working knowledge of Python or Bash for test automation, and comfort with Linux
• Clear written communication, since you'll document what each rule covers and what it doesn't

Good to have

• Experience with deep packet inspection, application identification (nDPI or similar), or DLP regex and pattern work
• Background at a network security vendor (firewall, IPS, NGFW, secure web gateway)
• Public work such as GitHub rules, blog posts, CVE credits, or CTF participation

This role is not

A SOC monitoring, alert triage, or pure penetration testing role. We are looking for people who write and test detection rules.

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

Job Summary:

We are looking for an experienced OpenText ArcSight SIEM / SOAR / UBA L2-L3 Engineer to manage and support security platforms in SOC/MSSP environment. The role involves day-to-day administration, troubleshooting, configuration and optimization of ArcSight platforms.

Key Responsibilities

• Administer and monitor OpenText ArcSight ESM/SIEM, SmartConnectors, SOAR and UBA/ArcSight Intelligence.
• Manage SIEM rules, filters, Active Lists, dashboards, reports and correlation use cases.
• Monitor EPS, event flow, connector health, system performance and log ingestion.
• Troubleshoot event collection, parsing, correlation and integration issues.
• Configure and troubleshoot ArcSight SmartConnectors and log sources.
• Manage and troubleshoot SOAR playbooks, integrations and automated workflows.
• Support UBA/Intelligence data ingestion, analytics and integration with SIEM.
• Perform L2/L3 troubleshooting, RCA and resolution of platform-related incidents.
• Support upgrades, patches, configuration changes and platform optimization.
• Coordinate with SOC, infrastructure, customer and OEM/OpenText support teams.
• Maintain technical documentation, incident records and RCA reports.

Required Skills

• 3–6 years of hands-on experience with OpenText ArcSight SIEM/ESM.
• Strong experience in ArcSight administration and troubleshooting.
• Hands-on experience with SmartConnectors, EPS, correlation rules, Active Lists and event flow.
• Working experience with ArcSight SOAR and UBA/ArcSight Intelligence.
• Good knowledge of Linux/Unix and networking fundamentals.
• Understanding of Syslog, CEF, TCP/IP, SSL/TLS and REST APIs.
• Strong analytical, troubleshooting and problem-solving skills.
• Experience in SOC/MSSP or managed security services environment preferred.
• OpenText/ArcSight certification will be an added advantage.

Candidate Profile

The candidate should be hands-on, technically strong and capable of independently handling L2/L3 production issues, platform administration, troubleshooting and escalations in a security operations environment.

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

About the role

EOR SOFTWARE LTD is a UK-registered software development company.

We are looking for a Cybersecurity Technical Specialist based in India who can quickly study unfamiliar products, prepare for technical discussions, and participate in live calls with software vendors in English.

Responsibilities

• Study vendors’ products and the prepared documentation before each call.

• Quickly understand the product’s purpose, architecture, deployment, integrations, licensing, and limitations.

• Collect missing information from the internal technical team using a short checklist.

• Participate in vendor calls in English and present the agreed use case.

• Ask clarifying questions and document requirements, limitations, and next steps.

• Never guess or invent technical information. If an answer has not been confirmed, explain that the information will be checked with the technical team and provided later.

• Prepare a short, structured summary after each call.

Requirements

• Strong spoken English at a practical B2+ level or higher.

• 2–5 years of relevant professional experience.

• Knowledge of Windows and network fundamentals, endpoint security, AV/EDR, vulnerability management, penetration testing, and Red Team concepts.

• Ability to understand technical questions and clearly explain cybersecurity concepts without relying on a prepared script.

Relevant professional backgrounds may include cybersecurity technical or product support, security consulting, SOC L2, endpoint security, solutions engineering, technical presales, and junior or mid-level penetration testing.

Engagement and compensation

• Fully remote, part-time contractual engagement.

• No fixed monthly working hours.

• Approximately 5–10 completed vendor calls per month.

• Calls are arranged in advance and require availability during agreed periods overlapping with European business hours.

• Compensation is USD 30 before taxes per completed vendor call.

• Expected monthly compensation is USD 150–300, depending on the number of completed calls.

• This is not a full-time salaried position. The annual salary range displayed on the platform is an estimated annual equivalent based on the expected call volume.

Selection process

• Short screening call with the manager, including a live English conversation.

• Rapid-learning exercise based on public documentation for an unfamiliar cybersecurity product.

• Short simulated vendor call focused on product understanding, technical communication, and handling unknown questions.

• Final interview.

Offensive-security tasks will not be performed during the assessment.

Senior Network Security Engineer (Microsegmentation) 

Key Responsibilities 

• Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. 
• Develop and support comprehensive solutions that meet requirements and align with HPE’s global network security and microsegmentation strategy. 
• Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models. 
• Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. 

Microsegmentation & Zero Trust Responsibilities 

• Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. 
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. 
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation. 
• Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. 
• Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. 
• Lead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation). 
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). 

Core Network Security Responsibilities 

• Participate in network security design reviews and ensure all implementations meet enterprise security standards. 
• Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. 
• Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. 
• Conduct and support internal and external security audits and compliance assessments. 
• Maintain awareness of emerging threats and update policies accordingly. 
• Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. 
• Manage and optimize Security Information and Event Management (SIEM) systems. 
• Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. 

Technical Qualifications 

• 10+ years of experience in enterprise network security architecture, engineering, and operations. 

Microsegmentation & Advanced Security 

• Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. 
• Proven capability to build application-aware segmentation policies based on traffic flow analysis. 
• Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. 
• Understanding of east-west traffic inspection, workload protection, and software-defined segmentation. 
• Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. 

Network Security & Infrastructure 

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. 
• Expertise in firewall architecture and design with hands-on experience in:  
• Fortinet (Fortigate), Palo Alto, Juniper 
• Policy design, NAT, routing, application control, and threat prevention profiles 
• Experience securing public and private cloud (AWS, Azure, GCP) environments. 
• Design and implementation of Web Application and API Protection (WAAP) solutions. 
• Strong experience in proxy (forward/reverse), load balancing, and application security integration. 
• Experience with SDN and SD-WAN architectures, including segmentation use cases. 

Networking & Protocol Expertise 

• Strong knowledge of:  
• Routing protocols: BGP, OSPF, RIP, MPLS 
• Network services: DNS, DHCP, NTP 
• IPv4/IPv6 architecture and traffic management 
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). 
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions. 

Data Center & Infrastructure 

• Experience managing enterprise data center environments with technologies including:  
• Aruba, Arista, Juniper switching 
• Firewalls, WAN optimization, IDS/IPS, DLP 
• Strong understanding of structured cabling and network facilities. 

Operations & Lifecycle Management 

• Plan, implement, and document infrastructure changes, including upgrades and migrations. 
• Work within ITIL frameworks for incident, change, and problem management. 

Education & Certifications 

• Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 
• 10+ years of experience in global network security environments. 
• Preferred certifications:  
• CCNP / CCIE 
• JNCIE 
• Security certifications (CISSP, CISM, or equivalent) are a plus 

Key Differentiators Added (for your context) 

This version strengthens the JD by: 

• Embedding microsegmentation as a core capability (not just one bullet) 
• Aligning with Zero Trust and application dependency mapping (important for your programs) 
• Emphasizing cross-team collaboration with application owners (critical for rollout success) 
• Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing)