Total 7 Legal / Public / Security job vacancies in Pune

Senior Engineer, Cyber – Product Security

NielsenIQ is maturing its Application Security programs and is recruiting an Application Security Engineer who will be responsible for supporting the rollout of DevSecOps capabilities and practises across all geographies and business units.  

As the Application Security Engineer, you will be responsible for integration, maintenance and analyses of the tools and technologies used in securing NIQ products/application throughout their development. You will oversee application security capabilities within a multi-national matrixed environment. The application security engineer will have the opportunity to replace the current Static and Dynamic Application Security Tool and advocate for the tech stack used for monitoring. 

This position will involve working closely with development/engineering teams, business units, technical and non-technical stakeholders, educating them and driving the adoption and maturity of the NIQ’s Product & Application Security programs. 

Responsibilities  

• Collaborate within Product Security Engineering and Cybersecurity teams to support delivery of its strategic initiatives. 
• Work with engineering teams (Developers, SREs & QAs) to ensure that products are secure on delivery and implement provided security capabilities. 
• Actively contribute to building and maintaining Product Security team security tools and services, including integrations security tools in the CI/CD process 
• Report on security key performance indicators (KPIs) to drive improvements across engineering teams’ security posture. 
• Contribute to Product Security Engineering team security education program and become an advocate within the organization’s DevSecOps and application security community of practice. 
• Review IaaS / PaaS architecture roadmaps for the cloud to and recommend baseline security controls and hardening requirements, supporting threat modelling of NIQ’s products. 

Be the link between threat and defence.

At The Missing Link, we don’t just respond to cyber threats, we stay one step ahead. As one of Australia’s most awarded IT providers, now proudly backed by global technology leader Infosys, we have spent more than 28 years helping organisations thrive through world‑class Cyber Security, IT & Cloud, and Automation solutions.

With over 200 passionate team members and a culture built on inclusion, innovation and impact, we offer more than a job, we offer a place where your expertise is valued, your growth is supported, and your contribution truly matters.

The Opportunity

We are looking for a Network Security Engineer to join our Global Security Operations Centre (GSOC), a 24x7 managed service providing round‑the‑clock protection to clients across a diverse range of industries.

This is a hands-on engineering role (not an analyst position), ideal for someone who enjoys working directly with market‑leading security technologies and solving complex security challenges in real time.

A Day in the Life

As part of our GSOC Engineering team, you will:

• Provide Level 1 and Level 2 support across a broad security stack including Palo Alto, CyberArk, Fortinet, Cisco, Checkpoint, Cloudflare, Zscaler and SASE solutions

• Configure, maintain and troubleshoot security platforms across on‑prem and cloud environments
• Work closely with Security Architects, Engineers, MDR (Watcher) teams and clients to transition solutions from project delivery into managed services
• Assist Senior SOC Engineers with incident response and threat containment
• Continuously improve SOC processes, procedures, and best practices
• Support clients during business hours, with exposure to live incidents and real‑world attack scenarios

You will work a four‑days‑on, four‑days‑off rotating shift pattern, with the flexibility of remote work, while gaining exposure to major Australian enterprises and cutting‑edge security technologies.

Essential Experience & Skills

• Minimum 3 years’ experience in Network Security within a Managed Service Provider or similar environment

• Hands‑on experience with NextGen Firewalls, Cloud SASE (e.g. Zscaler), WAFs, PAM solutions, and related security technologies
• Strong understanding of networking fundamentals (OSI Model, TCP/IP, network architectures)
• Experience with network segmentation, URL filtering, packet inspection, certificates, virtualisation and cloud security
• Proven troubleshooting, debugging, and problem‑solving skills in fast‑paced environments
• Ability to manage multiple tasks while meeting tight deadlines
• Experience briefing clients and providing security recommendations
• Strong collaboration and interpersonal skills, contributing to a positive, high‑performance team culture

Desirable

• Broader understanding across applications, operating systems, databases, storage and backups

• Vendor certifications or active pursuit of certifications (CyberArk, Cloudflare, Palo Alto, Cisco, Checkpoint, SASE)
• Exposure to Infrastructure as Code (IaC) in AWS or Azure
• Scripting or automation experience (PowerShell, Python, Bash)
• Passion for continuous learning — labs, home networks, forums, webinars and industry communities
• Interest in professional certifications such as ISC2, ISACA and vendor programs

A great company culture is very important to The Missing Link. We genuinely care about our people and our culture. Some of our favourite perks include:

• A supportive, collaborative and respectful environment

• Company‑paid training and certifications
• Clear pathways for career development and progression
• Exposure to leading technologies and complex enterprise environments
• A team that celebrates success, supports growth and enjoys working together

●As a Level 2 Cyber Defense Operations Center (CDOC) Senior Analyst, you will work in advanced security operations with a focus on SIEM and SOAR technologies, driving detection and response. You’ll be responsible for helping L3 in optimizing detection rules and managing high-severity incidents from triage to resolution.

● Your primary responsibility will be helping Level 1 analyst in analysis of incidents and assisting Level 3 on day-to-day operation.

● This role requires medium level technical expertise, team player quality, and a proactive approach to evolving threats.

Qualifications & Experience

●Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications (e.g., SANS/GIAC, ECIH, GCIH, CEH, DFIR) may be preferred.

●4-7 years of total experience in SOC in a large multi-national organization or in a known MSSP. In addition, candidate should possess at least 2 years of working experience on SOAR solutions.

Responsibilities

●Run daily SOC operations including SIEM/SOAR tuning, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Handlle end-to-end security incident analysis, containment, mitigation, and reporting, leveraging SIEM/SOAR insights and cross-team coordination for swift resolution.

●Work on high priority incidents or escalated incidents from L1

●Assist L3 in any adhoc investigation, fine-tuning security solution.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Document incident response activities and produce detailed reports for stakeholders.

●Conduct post-incident reviews to drive improvements in tools, processes, and readiness.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Guide and train junior analysts, promoting best practices and continuous improvement within the SOC.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Deep hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, Crowdstrike Logscale, Splunk.

●Strong working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

●Very high attention to detail, with strong skills in managing/presenting data and information.

●Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.

●Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams.

Job Description

Responsibilities:

• EDR Solution Management: Develop, configure, and maintain EDR solutions, tailoring them to specific Business needs and security requirements.
• Coverage: Develop baseline asset inventories and maintain owners for systems in the inventory. Always ensure to achieve 100% coverage in EDR deployment.
• Daily Operations: Perform routine tasks like tool administration, tuning, malware quarantining, and ensuring EDR tools effectively support security monitoring and incident response.
• Threat Detection and Response: Analyze EDR tool output to optimize security monitoring, support incident detection, and identify potential threats.
• Policy and Procedure Development: Develop, implement, and update EDR policies, rules, and configurations to align with security standards and threat intelligence.
• Collaboration: Work closely with SOC, threat intelligence, and other security teams to improve overall security posture.
• Security Assessment and Improvement: Offer expert advice and recommendations for improving security posture, mitigating vulnerabilities, and adhering to security standards.
• Incident Response: Participate in incident response efforts, utilizing EDR tools to investigate, contain, and remediate security incidents.
• Documentation and Reporting: Document findings, actions taken, and lessons learned for each incident. Prepare periodic security reports and contribute to compliance audits.
• Knowledge Sharing and Training: Guide and mentor Team, provide training sessions, and share knowledge on endpoint security best practices.
• Vendor Coordination: Coordinate with EDR vendors for troubleshooting, enhancement, and maintenance of endpoint security solutions.
• Compliance: Contribute to compliance audits and ensure adherence to security standards.
• Staying Up-to-Date: Remain current on the latest security threats and trends.

Technical & Soft Skills:

• Experience in scaling an enterprise EDR program across multiple environments seamlessly with proper strategy and prioritization.
• Strong knowledge of endpoint security technologies and concepts (EDR, DLP, MDM). Hands-on experience and deep knowledge of EDR technologies like CrowdStrike, Defender, Cortex.
• Experience with automated response via SOAR platforms and security orchestration.
• Understanding of network security, operating systems, and cloud environments.
• Experience managing endpoints in hybrid environments (Cloud, On-Prem, VDI).
• Advanced understanding of technical information security concepts related to threat landscapes.
• Strong understanding of network protocols, operating systems, and security technologies.
• Familiarity with compliance frameworks like ISO 27001, NIST, etc.
• Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.
• Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures
• Very high attention to detail, with strong skills in managing/presenting data and information.
• Demonstrable conceptual, analytical and innovative problem-solving and evaluative skills.
• Excellent communication, collaboration, and interpersonal skills.

●As a Level 1 Cyber Defense Operations Center (CDOC) Analyst, you will monitor different security solutions with focus on SIEM and SOAR technologies. You’ll be responsible for triaging security incidents, involving L2/L3 incase of high and critical incident. This role requires medium level of technical knowledge about network, email and Operating systems etc , team player quality, and a proactive approach to evolving threats.

Role and Responsibilities 

●Run daily Security monitoring, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.

●Continuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.

●Research emerging threats, vulnerabilities, and attack techniques to improve defenses.

●Collaborate across teams to improve the organization’s threat detection and response maturity.

●Maintain detailed incident records, contribute to reporting, and support audit readiness.

●Share knowledge with about new findings, update SOP, promoting best practices and continuous improvement within the SOC.

●Ensure detection and response processes align with regulatory and organizational standards.

●Stay up to date on emerging threats and technologies to continuously evolve SOC capabilities.

●Support comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.

Technical & Soft Skills:

●Good hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, CrowdStrike, Logscale, Splunk.

●Good working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.

●Strong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.

●Good understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).

●In-depth knowledge of threat landscapes and technical security concepts.

●Strong grasp of network protocols, OS internals, and security technologies.

●Familiar with compliance standards such as NIST CSF and ISO 27001.

●Strong organizational and time management skills with the ability to coordinate and prioritize multiple tasks simultaneously.

●Ability to work under pressure, especially during critical security incidents.

●Ability to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.

●Skilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures

Good communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams

Engineer, Cyber – Product Security

NielsenIQ is maturing its Application Security programs and is recruiting an Application Security Engineer who will be responsible for supporting the rollout of DevSecOps capabilities and practises across all geographies and business units.  

As the Application Security Engineer, you will be responsible for integration, maintenance and analyses of the tools and technologies used in securing NIQ products/application throughout their development. You will oversee application security capabilities within a multi-national matrixed environment. The application security engineer will have the opportunity to replace the current Static and Dynamic Application Security Tool and advocate for the tech stack used for monitoring. 

This position will involve working closely with development/engineering teams, business units, technical and non-technical stakeholders, educating them and driving the adoption and maturity of the NIQ’s Product & Application Security programs. 

Responsibilities  

• Collaborate within Product Security Engineering and Cybersecurity teams to support delivery of its strategic initiatives. 
• Work with engineering teams (Developers, SREs & QAs) to ensure that products are secure on delivery and implement provided security capabilities. 
• Actively contribute to building and maintaining Product Security team security tools and services, including integrations security tools in the CI/CD process 
• Report on security key performance indicators (KPIs) to drive improvements across engineering teams’ security posture. 
• Contribute to Product Security Engineering team security education program and become an advocate within the organization’s DevSecOps and application security community of practice. 
• Review IaaS / PaaS architecture roadmaps for the cloud to and recommend baseline security controls and hardening requirements, supporting threat modelling of NIQ’s products. 

THE POSITION: The IT Security Engineer is responsible for the operation of information protection technologies and the execution of information security policy and procedures. Position encompasses the participation in the EVERSANA security operations team and the testing and enforcement of appropriate Standard Operating Procedures and Key Performance Indicators. The IT Security Engineer will work closely with other IT peers and stakeholders in other departments to support the security of the environment as well as management and deployment of new cost/time-effective security solutions for all aspects of EVERSANA.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Our employees are tasked with delivering excellent business results through the efforts of their teams. These results are achieved by:

• Recommend and install appropriate IT security tools to prevent cyberattack

• Performs periodic security tool administration and maintenance to maintain proper function

• Conducts regular analysis of known assets to identify all vulnerabilities and track remediation.

• Monitors systems for newly released vulnerabilities that present high risk to EVERSANA.

• Participate in periodic testing of disaster recovery and business continuity plans.

• Works hand in hand with the regulatory compliance team to implement solutions that meet the needs of the business and reduce risk to an acceptable level.

• Demonstrate a commitment to diversity, equity, and inclusion through continuous development, modeling inclusive behaviors, and proactively managing bias.

• All other duties as assigned.