Senior Cyber Security Specialist

Magnet HR Consulting Services; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Magnet HR Consulting Services seeks a Senior Cyber Security Specialist to implement and mature enterprise-grade security controls across global infrastructure. You will lead real-world execution across DevSecOps, EDR/XDR, SIEM tuning, and incident response.

Responsibilities include enforcing zero-trust IAM, PCI-DSS compliance, data protection, and AI governance, while driving continuous improvement and secure SDLC integration in a fast-paced environment.

Qualifications

• 8+ years of practical cybersecurity work in enterprise environments.
• Hands-on tooling with EDR/XDR, SIEM, IAM/PAM and CI/CD security.
• Deep PCI-DSS, PII/HSPII protection knowledge and standards awareness.
• Cloud security experience across AWS/Azure/GCP.
• Bachelor's degree in CS or Cybersecurity.

Responsibilities

• Integrate automated security checks (SAST/DAST/SCA) into CI/CD pipelines.
• Deploy and harden EDR/XDR across endpoints with encryption and patching.
• Enforce zero-trust, RBAC and MFA with lifecycle access reviews.
• Lead vulnerability scanning, pen tests, and remediation workflows.
• Tune SIEM alerts, write threat detection playbooks, and monitor incidents.
• Drive incident response during live security events and drills.

Skills

EDR/XDR

SIEM tuning

DevSecOps

Threat detection

Zero-trust

Access management

Vulnerability management

PCI-DSS compliance

Education

Bachelor's degree in CS or Cybersecurity

Tools

SAST

DAST

SCA

EDR/XDR platforms

CI/CD security

PAM

SIEM

Threat intel tools

Job description

Role Overview :

Are you a hands-on cybersecurity expert who thrives on turning security policies into robust, enforceable defenses

We are seeking a Senior Cyber Security Specialist to implement, operate, and mature enterprise-grade security controls across our global infrastructure. In this high-impact role, you won't just write policiesyou will lead real-world execution across DevSecOps, EDR/XDR, SIEM tuning, Incident Response, PCI-DSS compliance, and cutting-edge AI Governance.

What Youll Do :

Hands-On Security Architecture & Control Execution :

• DevSecOps & Secure SDLC : Integrate automated security checks (SAST, DAST, SCA) into modern CI/CD pipelines and team up with developers to fix code-level vulnerabilities.
• Endpoint & Asset Security : Deploy, manage, and harden EDR/XDR solutions across all endpoints, ensuring full encryption, automated patching, and continuous asset discovery.
• Identity & Access Management (IAM) : Enforce zero-trust architectures, RBAC, least-privilege access, MFA, continuous PAM monitoring, and lifecycle access reviews.

Threat Management, AI Governance & Incident Response :

• AI Governance & Emerging Tech : Safeguard sensitive datasets in AI/ML pipelines, enforce AI model risk controls, and monitor responsible AI usage.
• Vulnerability & Threat Management : Lead continuous scanning, prioritization, penetration testing, and remediation workflows.
• SOC & Monitoring : Tune SIEM alerts to eliminate noise, write threat detection playbooks, and optimize incident alert coverage.
• Incident Response (IR) : Act as a key responder during live incidentsleading containment, root-cause analysis, drills, and recovery.

Data Protection & Vendor Oversight :

• PCI-DSS & Data Privacy : Build and maintain operational controls for PII/HSPII data protection, encryption, retention, and strict PCI-DSS audit readiness.
• Third-Party Risk (TPRM) : Conduct risk assessments for vendors, manage high-risk vendor compliance, and track technical remediations.
• Security Culture : Coordinate security awareness training, launch phishing simulations, and cultivate a security-first engineering culture.

What Were Looking For :

Core Requirements :

• 8+ Years of Practical Experience : Proven track record of implementing cybersecurity controls in active enterprise environments.
• Hands-on Tooling Knowledge : Direct expertise with EDR/XDR platforms, Vulnerability Management tools, SIEM solutions, IAM/PAM platforms, and CI/CD security integrations.
• Compliance Expertise : In-depth knowledge of PCI-DSS, PII/HSPII protection, and frameworks like ISO 27001, NIST CSF, and NIST 800-53.
• Cloud Security : Practical understanding of native security controls in AWS, Azure, or GCP.
• Education : Bachelors degree in Computer Science, Cybersecurity, or equivalent technical experience.

Preferred Certifications :

• CISSP, CISM, or CISA
• AWS Certified Security Specialty or Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• GIAC, CEH, or CompTIA Security+