Role & responsibilities
Implement and monitor application, API, infrastructure, and cloud security controls.
Conduct VAPT, security testing, code reviews, and threat assessments.
Ensure compliance with CERT-In guidelines, OWASP standards, and relevant cybersecurity frameworks.
Monitor security logs, alerts, and incidents, and coordinate remediation activities.
Support IAM, RBAC, data protection, and access control initiatives.
Prepare risk assessments, audit reports, security documentation, and mitigation plans.
Work with DevOps teams to secure CI/CD pipelines, Kubernetes clusters, containers, and cloud environments.
Implement encryption standards, secure configurations, and network security controls.
Support internal/external audits and compliance certification activities.
Promote secure coding practices and security awareness across teams.

Preferred candidate profile




Bachelors degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
Solid understanding of Application Security, API Security, and OWASP Top 10.
Experience in VAPT, penetration testing, security reviews, and risk assessments.
Knowledge of CERT-In guidelines and cybersecurity compliance requirements.
Familiarity with SIEM tools such as ELK/EFK, Splunk, Grafana, or Wazuh.
Understanding of IAM, RBAC, OAuth 2.0, JWT, SSO, and encryption standards.
Experience securing cloud environments (AWS, Azure, GCP, or Government Cloud) and DevOps pipelines.
Knowledge of firewalls, IDS/IPS, VPNs, WAF, and network security concepts.
Solid analytical, documentation, and communication skills.

📌 Security & Compliance Expert New Delhi
🏢 EY
📍 New Delhi