11+ NIST SP 800 Series Jobs in Bangalore (Bengaluru) | NIST SP 800 Series Job openings in Bangalore (Bengaluru)

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

• Strong DevSecOps profile
• Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
• Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
• Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
• Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
• Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
• Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
• Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
• Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
• B2B SaaS Product companies
• Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

• Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
• Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
• Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

• Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
• Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
• Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

• Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

• Monitor security alerts and investigate potential threats across cloud and application layers.
• Lead or support incident response efforts, root-cause analysis, and corrective actions.
• Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
• Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
• Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

• Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
• Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

• Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
• Promote secure engineering practices through training, documentation, and ongoing awareness programs.
• Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

• Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
• Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

• Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

• Strong hands-on experience in cloud security across AWS and Azure.
• Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
• Experience securing containerized and Kubernetes-based environments.
• Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
• Solid understanding of network security, encryption, identity, and access management.
• Experience with application security testing tools (SAST, DAST, SCA).
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
• Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

• Experience with DevSecOps automation and security-as-code practices.
• Exposure to threat intelligence and cloud security monitoring solutions.
• Familiarity with incident response frameworks and forensic analysis.
• Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

Key Skills & Experience:

🔹 #SQL, #OraclePLSQL, #Unix / Perl / Python

🔹 #OracleRDBMS (latest) | #PostgreSQL plus

🔹 DB Objects | Performance Tuning | Analytics

🔹 #UnixLinux, Agile (Scrum, JIRA, Confluence, BitBucket)

🔹 DevOps (UC4, Maven, Jenkins, CI/CD)

🔹 ETL, Data Modeling, Informatica

🔹 Java, Angular/React, Spring Boot, XML, JSON, API Gateway

🔹 #OracleAPEX advantage

You should have at least 7 years of C# coding experience.

should be well versed in following standard coding practices.

understand design and implement functionalities within timelines

should be able to implement common design patterns as and when required.

You need to write scalable Python code for developing and implementing robust applications. You would indulge your dedication and passion to build server-side logic ensuring low-latency and high end performance. You should have sound knowledge of Python frameworks such as Django and Flask.

YOUR ‘OKR’ SUMMARY

OKR means Objective and Key Results.

As a Software Engineer at Coredge, you will help develop our next-generation cloud native core solution along with the product and the open-source community to build the Coredge.io vision.

What you will do?

• System engineering and implementation in Python and Golang.

• Working on performance issues using creative experiments and internally developed product features.

• Research, propose, and integrate relevant open-source projects based on product objectives.

• Write organized, efficient, and well documented Python/Golang code as an example for junior engineers.

• Participation in all levels of product definition, design, implementation, testing, and deployment.

• Must include the ability to discuss abstract system architectures from ideas through implementation and

           creatively apply domain experience to solve technical challenges.

• Mentoring software engineers, fostering an environment of trust and accountability.

What you will need?

A strong sense of ownership, urgency, and drive. As an integral part of the development team, you will need the

following skills to succeed.

• Strong Python skills to develop framework(s).

• Hands-on to design & develop re-usable framework components.

• Hands-On experience on developing framework, designing re-usable framework components.

• Experience in engineering practices such as code refactoring, design patterns, design driven development, Continuous Integration, building highly scalable applications, application security and functional programming.

Additional Skills:

• Knowledge of Cloud native would be an advantage.

• Understanding of Kubernetes from Architecture side and also understand the Standard API.

• Code contributed to CNCF or similar community will be plus.

• Performance benchmarking of K8’s or any cloud will be added advantage

• demonstrates a growth mindset, seeks feedback often and is effective in continuous personal and professional development
• provides expertise in all phases of the development lifecycle from concept and design to testing
• defines the architecture, best practices and coding standards for the product development team
• supports continuous technical improvement by investigating alternatives and technologies and presenting these for architectural review
• motivates team members and extends goodwill to other employees while having fun!

• 2+ years of software industry experience
• Strong Expertise in JS, PHP, React, Node, Angular2+, MySQL, PostgreSQL
• Solid understanding of software design, development, testing, and problem-solving
• Expertise in coding efficient, high quality and modularized software
• Experience in developing Web services - Rest/Soap APIs/HTTP API - Microservices
• Experience setting up and managing servers. Devops experience is a big plus
• Strong exposure on Database like RDBMS - Postgres DB / NoSQL DB like DynamoDB, Elasticsearch
• Experience in Cloud / Storage like Amazon (AWS) - EC2/EBS/S3
• Expertise in test automation
• Familiarity with Unix shell and source control systems and tools such as git
• Strong technical leadership skills
• Comfortable collaborating with designers, front-end developers and other team members
• Strong communication skills
• Technical Coaching and mentoring skills
• Understanding of machine learning, natural language processing is a plus

Industry: Recruitment & Staffing (must have)

Required Experience and Qualifications:
- 2 years of experience
- Should have sold/is selling recruitment/talent/staffing/workforce solutions
- Hands-on experience in sales, business development, B2B, lead generation, telephone & email prospecting, corporate sales, market mapping & research, cold calling, appointment generation, etc
- Passionate about making talent acquisition cognitive
- New customer acquisition
- Ready to learn and unlearn

Benefits: Paid holidays, work detox leaves, menstruation leaves for women, robust incentive plans, education allowance, mobile reimbursement, etc.

Key Tasks and Duties:
- Prospecting for new clients/lead generation
- End-to-end B2B selling
- Monthly and annually new client acquisitions
- Direct communication with customers via e- mail and telephone to promote Reed & Willow & its Service Range
- Execute marketing plan/marketing campaigns (e.g. targeted e- shot, mail shot)
- Follow up and qualify contacts from web registrations, promotions, events, and other marketing and sales activities
- Preparation and presentation of results from campaigns
- Setting up Sales Meetings with qualified prospects
- Recording of all sales activities in the CRM- Market research feedback

Traits of our Team:
Motivation and drive: 
- Is driven and enthusiastic, which encourages commitment from others
- Responds positively to problems and uses them as an opportunity to do things differently or better

Planning and organizing: 
- Structures work to achieve the best outputs
- Anticipates and adjusts for problems and roadblocks, taking responsibility for prior commitments

Delivering results and continuous improvement:
- Is flexible and able to revise the plan when needed
- Analyses issues or set- backs without bias, and is open about mistakes to encourage learning
- Meets targets and deadlines

Job Summary:

• Willingness to work on highly scalable cloud-native solutions based on microservices.
• Quickly learn the technologies and deliver using the same.
• Take complete ownership of the customer requirements.
• Motivated to deliver world-class quality.
• Inclined to bring new ways of thinking, working and providing solutions.
• Drive the concept of quality into everybody and have a zero-tolerance towards bad quality.

• Understand requirements from product management, customer and able to comprehensively break this down to manageable tasks.

Experience:

● 3-9 years of development experience.

Technical Skills:

Mandatory:

• Java - Advanced concepts concurrency, reflection, lambda, Java Springboot, Spring security,
• Actuator/Prometheus/Grafana/Servo (metrics),
• EFK/ELK stack (log analysis)
• OpenAPI/Swagger (documentation)
• RDBMS (PostgreSQL, MySQL, Maria or any other)
• NoSQL (Anyone of Mongo DB, Redis, Cassandra, Neo4J or other DBs)
• Automated unit tests/e2e tests (JUnit, TestNG, RestAssured etc)
• CI/CD pipelines (Jenkins, Sonar, Maven/Gradle etc)

Optional: (But highly recommended)

• NewSQL DB (TiDB, CockroachDB)
• AMQP/RabbitMQ
• Kafka
• Docker
• Kubernetes