11+ NIST SP 800 Series Jobs in Bangalore (Bengaluru) | NIST SP 800 Series Job openings in Bangalore (Bengaluru)

SENIOR INFORMATION SECURITY ENGINEER (DEVSECOPS)

Key Skills: Software Development Life Cycle (SDLC), CI/CD

About Company: Consumer Internet / E-Commerce

Company Size: Mid-Sized

Experience Required: 6 - 10 years

Working Days: 5 days/week

Office Location: Bengaluru [Karnataka]

Review Criteria:

Mandatory:

• Strong DevSecOps profile
• Must have 5+ years of hands-on experience in Information Security, with a primary focus on cloud security across AWS, Azure, and GCP environments.
• Must have strong practical experience working with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud, Wiz, or Orca along with SIEM / IDS / IPS platforms
• Must have proven experience in securing Kubernetes and containerized environments including image security,runtime protection, RBAC, and network policies.
• Must have hands-on experience integrating security within CI/CD pipelines using tools such as Snyk, GitHub Advanced Security,or equivalent security scanning solutions.
• Must have solid understanding of core security domains including network security, encryption, identity and access management key management, and security governance including cloud-native security services like GuardDuty, Azure Security Center etc
• Must have practical experience with Application Security Testing tools including SAST, DAST, and SCA in real production environments
• Must have hands-on experience with security monitoring, incident response, alert investigation, root-cause analysis (RCA), and managing VAPT / penetration testing activities
• Must have experience securing infrastructure-as-code and cloud deployments using Terraform, CloudFormation, ARM, Docker, and Kubernetes
• B2B SaaS Product companies
• Must have working knowledge of globally recognized security frameworks and standards such as ISO 27001, NIST, and CIS with exposure to SOC2, GDPR, or HIPAA compliance environments

Preferred:

• Experience with DevSecOps automation, security-as-code, and policy-as-code implementations
• Exposure to threat intelligence platforms, cloud security monitoring, and proactive threat detection methodologies, including EDR / DLP or vulnerability management tools
• Must demonstrate strong ownership mindset, proactive security-first thinking, and ability to communicate risks in clear business language

Roles & Responsibilities:

We are looking for a Senior Information Security Engineer who can help protect our cloud infrastructure, applications, and data while enabling teams to move fast and build securely.

This role sits deep within our engineering ecosystem. You’ll embed security into how we design, build, deploy, and operate systems—working closely with Cloud, Platform, and Application Engineering teams. You’ll balance proactive security design with hands-on incident response, and help shape a strong, security-first culture across the organization.

If you enjoy solving real-world security problems, working close to systems and code, and influencing how teams build securely at scale, this role is for you.

What You’ll Do-

Cloud & Infrastructure Security:

• Design, implement, and operate cloud-native security controls across AWS, Azure, GCP, and Oracle.
• Strengthen IAM, network security, and cloud posture using services like GuardDuty, Azure Security Center and others.
• Partner with platform teams to secure VPCs, security groups, and cloud access patterns.

Application & DevSecOps Security:

• Embed security into the SDLC through threat modeling, secure code reviews, and security-by-design practices.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Secure infrastructure-as-code and containerized workloads using Terraform, CloudFormation, ARM, Docker, and Kubernetes.

Security Monitoring & Incident Response:

• Monitor security alerts and investigate potential threats across cloud and application layers.
• Lead or support incident response efforts, root-cause analysis, and corrective actions.
• Plan and execute VAPT and penetration testing engagements (internal and external), track remediation, and validate fixes.
• Conduct red teaming activities and tabletop exercises to test detection, response readiness, and cross-team coordination.
• Continuously improve detection, response, and testing maturity.

Security Tools & Platforms:

• Manage and optimize security tooling including firewalls, SIEM, EDR, DLP, IDS/IPS, CSPM, and vulnerability management platforms.
• Ensure tools are well-integrated, actionable, and aligned with operational needs.

Compliance, Governance & Awareness:

• Support compliance with industry standards and frameworks such as SOC2, HIPAA, ISO 27001, NIST, CIS, and GDPR.
• Promote secure engineering practices through training, documentation, and ongoing awareness programs.
• Act as a trusted security advisor to engineering and product teams.

Continuous Improvement:

• Stay ahead of emerging threats, cloud vulnerabilities, and evolving security best practices.
• Continuously raise the bar on a company's security posture through automation and process improvement.

Endpoint Security (Secondary Scope):

• Provide guidance on endpoint security tooling such as SentinelOne and Microsoft Defender when required.

Ideal Candidate:

• Strong hands-on experience in cloud security across AWS and Azure.
• Practical exposure to CSPM tools (e.g., Prisma Cloud, Wiz, Orca) and SIEM / IDS / IPS platforms.
• Experience securing containerized and Kubernetes-based environments.
• Familiarity with CI/CD security integrations (e.g., Snyk, GitHub Advanced Security, or similar).
• Solid understanding of network security, encryption, identity, and access management.
• Experience with application security testing tools (SAST, DAST, SCA).
• Working knowledge of security frameworks and standards such as ISO 27001, NIST, and CIS.
• Strong analytical, troubleshooting, and problem-solving skills.

Nice to Have:

• Experience with DevSecOps automation and security-as-code practices.
• Exposure to threat intelligence and cloud security monitoring solutions.
• Familiarity with incident response frameworks and forensic analysis.
• Security certifications such as CISSP, CISM, CCSP, or CompTIA Security+.

Perks, Benefits and Work Culture:

A wholesome opportunity in a fast-paced environment that will enable you to juggle between concepts, yet maintain the quality of content, interact and share your ideas and have loads of learning while at work. Work with a team of highly talented young professionals and enjoy the comprehensive benefits that company offers.

Job Description

Automation Developer (IBM MQ Migration Automation)

Automation Developer - MQ Migration Solutions

Location: Bangalore & Hyderabad

Experience: 8+ Years

Budget- 26 LPA

Job Summary

We are seeking an experienced Automation Developer to design, develop, and enhance automation solutions that support IBM MQ Queue Manager migration initiatives. The role focuses on integrating AI-powered automation tools with existing migration platforms and processes to create a unified, scalable, and end-to-end migration framework.

The ideal candidate will possess strong software development, scripting, and automation expertise, combined with experience in enterprise infrastructure, DevOps practices, and IBM MQ technologies.

Mandate Skills: Python, IBM MQ + Automation, API development, Shell/PowerShell scripting, CI/CD, Ansible/Terraform, AI automation exposure

Key Responsibilities

Design and develop automation solutions supporting IBM MQ migration activities.

Integrate multiple automation tools, scripts, and workflows into a unified migration framework.

Develop and maintain Python, Shell, and PowerShell automation scripts.

Create APIs and connectors to enable seamless orchestration and tool integration.

Automate migration discovery, assessment, execution, validation, and reporting processes.

Implement AI-assisted automation capabilities to improve migration efficiency and decision-making.

Develop reusable automation components and frameworks to support future migration initiatives.

Collaborate with MQ administrators, solution architects, infrastructure teams, and business stakeholders.

Troubleshoot and resolve automation-related issues across migration projects.

Develop and maintain technical documentation, deployment guides, and operational runbooks.

Support CI/CD pipeline implementation and automated deployment processes.

Ensure automation solutions adhere to enterprise security, compliance, and operational standards.

Required Technical Skills

Primary Skills

Python Development

Shell Scripting (Linux/Unix)

PowerShell Scripting

REST API Development and Integration

JSON/XML Data Processing

Git/GitHub Version Control

Automation & DevOps

Workflow Automation

Jenkins, Azure DevOps, or GitHub Actions

CI/CD Pipeline Development

Infrastructure as Code concepts

Ansible or Terraform (Preferred)

IBM MQ Skills

IBM MQ Queue Manager configuration and administration

MQ migration and deployment concepts

Queue Manager migration strategies

IBM MQ automation and scripting

Required Experience

5+ years of experience in automation development.

Strong programming experience with Python and scripting technologies.

Hands-on experience designing and implementing automation solutions and APIs.

Experience integrating multiple automation tools into unified workflow solutions.

Solid understanding of software development life cycle (SDLC) and DevOps practices.

Experience working with enterprise infrastructure and middleware technologies.

Experience in Agile/Scrum delivery environments.

Exposure to AI-assisted automation technologies is highly desirable.

Prior experience with IBM MQ administration or migration projects is preferred.

Key Competencies

• Perform hands-on development using Java, Spring Boot, Angular.
• Drive solution design, code quality, best practices, and performance optimization.
• Work closely with the client’s product owners and architects.
• Conduct code reviews, technical grooming, and sprint planning.
• Troubleshoot and resolve complex technical issues.
• Ensure timely delivery of modules with high quality.
• Mentor team members and support them in solving technical blockers.

Technical Skills Required

• Strong expertise in Java 8+, Spring Boot, REST APIs.
• Strong front-end experience with Angular 8+, TypeScript, HTML, CSS.
• Experience with SQL/NoSQL databases (MySQL, PostgreSQL, MongoDB, etc.).
• Hands-on with Git, Maven/Gradle, Jenkins, CI/CD.
• Knowledge of cloud platforms (AWS) is an added advantage.
• Experience with Agile/Scrum methodologies.

• 6+ years of experience in Software Development and writing Unit tests for Mobile Apps
• Excellent designing, debugging and programming skills in an Object oriented programming language like C#, Java, javascript, Swift, Dart etc.
• Experience with Native Mobile development (Android or IOS) and Cross-Platform mobile development (preferably Flutter)
• Solid understanding of SOLID principles
• Strong knowledge of writing code for testability, modularity and extensibility
• Knowledge of test methodologies and corresponding unit test framework tools like JUnit etc.
• Excellent communication and organizational skills.
  
  

• Experience working with BloC Pattern and Dependency Injection
• Knowledge of Eventing based programming patterns. 
• Exposure to integrating Performance, Analytics, Attribution tools
• Experience of using Flavors in application development
• Knowledge of Multi-module development in Flutter (ex- via Melos)

• Work with the product team and drive design, development and delivery of new features.
• Investigate and fix issues referred to by the support team. Write code to automate tests to automate regressions.
• Work on improving stability, debuggability, testability of existing functionalities/modules/components
• Integrate REST and GraphQL APIs and consume in app.
• Serve as a technical lead for the team
• Mentor team members

The technical skills we're looking for are as follows:

i. Electron JS

ii. Fabric JS/canvas

Note: Candidates should have an experience of a minimum of 3 years in the above skills.

Location: Bangalore, Karnataka

Job Description:

1. Strong Object Oriented designing and programming skills in Java
2. Solid understanding of the Android App Components lifecycle
3. Experience in Google Cloud APIs and Firebase APIs
4. Experience in Flutter
5. Experience in SQLite database
6. Knowledge of important libraries like RxJava, Retrofit, Okhttp
7. Knowledge of MVVM architecture, GPS location tracking
8. Knowledge of source code management tools like Git
9. Have published at least one app on Google play store
10. Experience in working with remote data via REST and JSON
11. Maintain quality and ensure responsiveness of applications.
12. Collaborate with the rest of the engineering team to design and launch new features.
13. Experience with Android SDK and multiple versions of Android.
14. Experience with Android framework, as well as offline storage, threading, and performance tuning.
15. Experience with Android UI principles and best practices.

Good to have skills:

1. Having experience in Kotlin, Dagger, Jetpack, Room database
2. Having experience in Flutter, React-Native.

Technical knowledge

• Design and implement software components using up-to-date technologies and best practices.
• Comprehensive understanding of the REST architecture.
• Strong working experience in Angular,HTML5, CSS3
• Strong working experience in Container Orchestration Management on-premise and public cloud (Docker, Kubernetes or similar)
• Overall understanding of the Service Oriented Architecture
• Experience with widely used design patterns.
• Should possess prior experience in building distributed multi-tier applications with single sign-on.
• Continuous Integration (CI) and Automated Deployment on AWS/Azure
• Static and dynamic code quality analysis
• Should understand the dynamics of the full-stack development and guide junior team members.
• Experience in developing enterprise-scale software platforms
• Should have hands-on experience in managing releases.
• Build applications using Azure Services and deploy them on Azure Infrastructure.

We are an IT Services and Product Development company, headquartered in Bangalore, that develops ERPs, Mobile Apps, and Web-Apps for our clients and customers globally.

Our Engineering team is looking for a Sr. Full-Stack Engineer to join our base in Bangalore, KA. Your key role will be to lead architectural level discussions, define performance upgrades, undertake new initiatives to groom our engineering team and provide valuable insights on all levels. If you are a problem solver with a unique way of thinking from a technology POV, and a great team player, we have the right role for you.

A high level overview of what this role looks like:

Engineering – 50% of time: As a leader, you will be undertaking engineering tasks which are complex in nature and also work on big modules and define the architectural layouts, both on Application, API and Database level.

Problem Solver - 30% of time: Be a Problem Solver, help our Engineering team to come up with a new solution that makes our applications - scalable, high in performance, reliable, and secure. This includes having ability to drive engagement on Engineering and also from DevOps Point of View.

Training & Improvements – 20% of time: Groom our Engineering Team, provide training, valuable insights and knowledge transfers (KT)  based on your years of experience building apps, products and delivering projects and working with different clients and teams.

What you bring to the table:

• Experience in independently managing, End-to-End Implementation, Design and Development of IT Projects and Products (Apps and Web-Apps)
• Experience converting Business Cases to Technology case and Building Products from scratch
• Experience in Training team and grooming them, undertaking managerial tasks such as Quarterly Skills Meeting, and Profile Evaluation, GAP Analysis
• Experience in Providing inputs to Project Budgeting, Efforts Estimations (EE), Technology Decks,
• Experience in Writing Test Cases and Managing UAT and Deployment Cycle (Automation Testing)
• Working with Client to understand provide Consulting or Business Solutions, Problem Solving Approach and Skills, Strong Analytical Skills, should be able to read between the lines
• Interacting with the Technical/Engineering team to ensure Delivery and Implementation of the Software Solution/Projects
• Client Relationship Management, Excellent at English Speaking, and Written Communication
• Understanding of Change Management, Risk Management and Project Management
• Experience working with US Clients is a Must
• Experience and Exposure working with different projects and business models will be an advantage
• Understanding of Blockchain, Healthcare, HIPAA Compliances, RPA, Payments Services, DevOps will be an asset

Must have skills:

• Excellent Written and Oral Communication Skills and Etiquettes
• Excellent Presentation Skills
• Experience in working with Onshore and Offshore Teams and Experience handling Cross-Functional Projects, Resources and Clients and ability to provide inputs to improving ODCs (Off-shore development centres)
• Experience dealing with Pressure and Meeting strict Project Deadlines
• Leadership and Motivational Skills to ensure the Work is being done by the Resources on time and within the specified budget
• Experience in handling Conflict and Resolution Management

Qualifications:

• 8 -12 years of overall experience
• Experience of working on Mobile & Web Applications (across Android & iOS)
• Strong understanding of Java & MERN/ MEAN stack - Angular/Node/React/ Vue
• Ability to create APIs in REST, and GraphQL understanding of JSON, XML, Websockets, SOAP, COBRA
• Good to have experience of Office 365 - SharePoint and ASP.Net
• Understanding of Database: MySQL, MongoDB, Oracle, PostGres
• Understanding of Project Management: Agile/Scrum, Waterfall both is fine
• Previous experience of working in FinTech, eCommerce, Enterprise Projects, C2C, B2C, B2B Apps will be an added advantage