Walk-in || Security Expert

Walk - In Drive at New Delhi location - Security Expert (Cyber security)

Job Description Security Expert

Qualification

• B.E./B.Tech./MCA or equivalent qualification.

Experience

• 7+ years of overall experience in the IT industry, with at least 3+ years of relevant experience in Information/Cyber Security.
• Experience in at least 2 projects for Central Government, State Government or PSU organizations.
• Relevant industry-recognized security certifications such as CISSP, CISM, CEH, CCSP or equivalent preferred.

Key Responsibilities

• Define and implement security architecture and controls for the iPIE application, APIs, cloud infrastructure, databases and external integrations.
• Implement and manage security controls covering IAM, RBAC, SSO, authentication, authorization and privileged access.
• Work with Keycloak/SSO, API Gateway, WAF, firewalls, IDS/IPS, SSL/TLS and secure proxy technologies.
• Coordinate Vulnerability Assessment and Penetration Testing (VAPT), security audits, remediation and security hardening.
• Assess application and infrastructure vulnerabilities and ensure timely remediation of identified security risks.
• Define security controls for REST APIs, microservices, web/mobile applications and third-party integrations.
• Ensure appropriate encryption, key management, secrets management, secure communication and data protection mechanisms.
• Support security monitoring, logging, incident detection and integration with SIEM/SOC and other security monitoring tools.
• Review security aspects of cloud infrastructure, containers, databases, DevSecOps pipelines and deployment environments.
• Ensure appropriate security controls for sensitive case, stakeholder, financial, compliance and document-related information handled by iPIE.
• Support development and maintenance of security policies, standards, procedures, threat models and security documentation.
• Ensure compliance with applicable Government of India security guidelines, CERT-In requirements, data protection requirements and project-specific security policies.
• Coordinate with development, infrastructure, cloud, application and external integration teams to address security requirements throughout the SDLC.
• Conduct security architecture reviews, threat modeling and security risk assessments across applications, APIs, infrastructure and integrations.
• Support security incident response, investigation, remediation and compliance/audit activities.

Technical Skills

• Network Security: Firewall, IDS/IPS, WAF, VPN, Secure Proxy and SSL/TLS.
• Application Security: OWASP, API Security, Secure SDLC, SAST/DAST and VAPT.
• Identity & Access Management: SSO, OAuth 2.0, OpenID Connect, JWT, RBAC and Keycloak.
• Cloud Security: Cloud IAM, encryption, secrets management, security groups/network controls and security monitoring across cloud or Government Cloud environments.
• Security Monitoring: SIEM, SOC, audit logging, vulnerability management and incident response.
• Container/Kubernetes Security: Kubernetes RBAC, network policies, pod security, container security and image vulnerability scanning.
• DevSecOps: Security automation and integration of security controls into CI/CD pipelines, including dependency/SCA scanning, secrets detection and infrastructure-as-code security.
• Software Supply Chain Security: SBOM, dependency vulnerability management and secure software supply-chain practices.

Preferred Experience

• Experience in large-scale Government/PSU platforms involving multiple stakeholders, external system integrations, sensitive data, document management and regulatory/compliance workflows.

Interested candidate can walk - in direct to CMS office in New Delhi Location

Contact person - Apoorva Iyer