– Senior Cyber Security Specialist Role Overview

We are seeking a Senior Cyber Security Specialist with solid hands-on experience in implementing, operating, and maturing security controls across enterprise environments. The role requires deep execution capability across asset management, access control, secure development, endpoint security, security testing, AI governance, supplier risk, employee awareness, monitoring & detection, and incident response, with proven expertise in PII / HSPII protection and PCI-DSS compliance.

This position plays a critical role in translating security policies, standards, and frameworks into operational, measurable, and enforceable controls.

Key Responsibilities

- Asset & Access Management
- Implement and maintain asset inventory controls (hardware, software, cloud assets).
- Execute Identity & Access Management (IAM) controls including RBAC, least privilege, MFA, and periodic access reviews.
- Support onboarding/offboarding automation and privileged access monitoring.
- Secure Development & DevSecOps
- Implement Secure SDLC controls aligned with organizational standards.
- Integrate security checks into CI/CD pipelines (SAST, DAST, SCA).
- Work with engineering teams to remediate code-level security issues.
- Ensure secure configuration baselines for applications and APIs.
- Endpoint Security
- Deploy and manage endpoint protection controls (EDR/XDR).
- Enforce device hardening, disk encryption, patching, and configuration standards.
- Monitor endpoint compliance and address control gaps.
- Security Testing & Assurance
- Execute vulnerability management lifecycle including scanning, validation, prioritization, and remediation tracking.
- Coordinate and support penetration testing and security assessments.
- Validate closure of findings and maintain evidence for audits.
- AI Governance & Emerging Technology Risk
- Implement AI governance controls covering data usage, model risk, access control, logging, and monitoring.
- Support AI risk assessments and document compliance with responsible AI principles.
- Ensure protection of sensitive data used in AI/ML workloads.
- Supplier & Third-Party Risk Management




- Execute supplier security assessments and due diligence.
- Track remediation of third-party security findings.
- Monitor high-risk vendors for ongoing compliance.
- Employee Security Awareness
- Support execution of security awareness and phishing simulation programs.
- Embed security training aligned with role-based risks.
- Measure effectiveness through metrics and behavior improvement.
- Monitoring, Detection & SOC Support
- Implement and tune security monitoring and detection controls.
- Integrate logs into SIEM and ensure alert coverage for critical risks.
- Support threat detection use cases and reduce false positives.
- Incident Response
- Execute incident detection, containment, eradication, and recovery activities.
- Participate in incident response drills and post-incident reviews.
- Maintain IR documentation, playbooks, and evidence logs.
- Data Protection & Compliance
- Implement controls for PII and Highly Sensitive PII (HSPII) protection including encryption, access controls, logging, and retention.
- Execute and maintain PCI-DSS technical and operational controls.
- Support internal and external audits with accurate evidence.

Required Skills & Experience Technical Skills

- Strong experience implementing security controls hands-on, not just defining policy.
- Practical knowledge of:
- IAM, PAM
- Endpoint Security (EDR/XDR)
- Vulnerability Management tools
- SIEM / SOC operations
- Secure SDLC & DevSecOps tooling
- Solid understanding of PCI-DSS, PII/HSPII protection, and data security principles.
- Familiarity with cloud security controls (AWS/Azure/GCP preferred).

Frameworks & Standards (Implementation Focus)
- ISO 27001 / ISO 27002
- NIST CSF / NIST 800-53
- PCI-DSS
- Zero Trust concepts
- Privacy and data protection controls





Experience & Qualifications

- Bachelor Degree in Computer science or equivalent
- 8+ years of experience in cybersecurity or information security roles.
- Proven track record of control implementation, execution, and operationalization.
- Experience working with engineering, IT, SOC, risk, and compliance teams.
- Relevant certifications (preferred):
- CISSP, CISM, or CISA
- AZ-500 / AWS Security Specialty
- CEH / Security+ / GIAC (role dependent)

Key Competencies
- Execution-driven and outcome focused
- Strong stakeholder collaboration
- Risk-based decision making
- Clear documentation and evidence management
- High ownership during incidents and audits

Asset & Access Management
- Implement and maintain asset inventory controls.
- Execute IAM controls including RBAC, least privilege, MFA, and access reviews.

Secure Development & DevSecOps
- Implement Secure SDLC controls and integrate security tooling into CI/CD pipelines.
- Work with engineering teams to remediate vulnerabilities.

Endpoint Security
- Deploy and manage EDR/XDR solutions.
- Enforce device hardening, encryption, and patching.

Security Testing & Assurance
- Execute vulnerability management and penetration testing activities.
- Track remediation and maintain audit evidence.

AI Governance
- Implement AI governance and model risk controls.
- Ensure sensitive data protection in AI workflows.

Supplier Risk Management
- Conduct supplier security assessments and track remediation.

Employee Security Awareness
- Support execution of awareness and phishing simulation programs.

Monitoring & Detection
- Implement monitoring controls and tune SIEM alerts.

Incident Response
- Participate in incident handling, drills, and post-incident reviews.

Data Protection & Compliance
- Implement PII/HSPII controls.
- Execute PCI-DSS technical and operational requirements.

Experience & Qualifications

- 8+ years of cybersecurity experience.
- Strong control implementation background.
- Relevant certifications (CISSP, CISM, CISA preferred).

Skills: ssdlc,pam,vapt,cybersecurity,iam,dddp

📌 Senior Cybersecurity Specialist (Bengaluru)
🏢 Magnet HR Tech Digital
📍 Bengaluru