Vacancy description
Senior Cyber Security Engineer in भारत
Nityo Infotech Services Pvt. Ltd.
भारत
Role : Senior Cyber Security EngineerJob Overview : We are seeking an experienced cybersecurity professional with expertise in security risk assessments, security architecture reviews, threat modelling, cloud security, and third-party risk https://jobeax.com/link/LKDT4x4wpSDrttPm ideal candidate will be responsible for identifying security risks, evaluating enterprise security controls, recommending mitigation strategies, and ensuring compliance with established security frameworks and organizational https://jobeax.com/link/1KLD1Xq4QX9YLoNi role involves working across enterprise applications, cloud environments, SaaS platforms, APIs, and emerging AI solutions to strengthen the organization's security posture and support effective risk https://jobeax.com/link/dzGufUToQ9crO9tU Responsibilities : - Conduct Security Risk Assessments (SRA) for enterprise applications, cloud platforms, SaaS solutions, APIs, and emerging AI technologies.- Perform Security Architecture Reviews to identify design-level security gaps and recommend appropriate security controls.- Develop and execute threat modelling exercises using methodologies such as STRIDE to identify potential threats and attack vectors.- Assess cloud security configurations and architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).- Support Third-Party Risk Management (TPRM) activities, including vendor security assessments, control reviews, and risk remediation tracking.- Evaluate security controls against ISO 27001, NIST frameworks, and relevant industry standards.- Conduct vulnerability assessments, analyze findings, prioritize risks, and coordinate remediation activities with technical teams.- Maintain risk registers, assessment reports, remediation plans, and governance documentation.- Collaborate with application development, infrastructure, cloud, enterprise architecture, and compliance teams to address identified security risks.- Monitor remediation progress, validate corrective actions, and escalate unresolved or high-risk security issues to relevant stakeholders.- Support security audits, compliance reviews, and risk governance initiatives.- Assess security risks associated with APIs, integrations, third-party platforms, and AI-enabled applications.- Provide practical recommendations to improve security architecture, risk management processes, and organizational security https://jobeax.com/link/er5RmJcSbCJrg6l5 Skills and Qualifications : - Strong experience in cybersecurity, information security, security risk assessments, or security assurance.- Hands-on experience conducting Security Risk Assessments and Security Architecture Reviews.- Practical knowledge of threat modelling methodologies, particularly STRIDE.- Understanding of cloud security principles and controls across AWS, Azure, and GCP.- Experience with Third-Party Risk Management (TPRM) and vendor security assessments.- Knowledge of ISO 27001, NIST Cybersecurity Framework, and related security control standards.- Experience with vulnerability assessment, risk prioritization, remediation tracking, and security compliance.- Ability to assess security risks across enterprise applications, cloud infrastructure, SaaS platforms, and APIs.- Understanding of security governance, risk registers, control effectiveness, and audit documentation.- Strong analytical, problem-solving, documentation, and stakeholder management skills.- Ability to communicate technical security risks and remediation recommendations to technical and non-technical https://jobeax.com/link/FfNN38MjANEx2m9w Qualifications : - Relevant certifications such as CISSP, CISM, CISA, CCSP, or ISO 27001 Lead Implementer/Auditor.- Experience assessing security risks in AI-enabled applications and emerging technology environments.- Familiarity with cloud security best practices, secure architecture principles, and application security controls.- Experience working in enterprise environments with established risk governance and compliance processes. (ref:hirist.tech)