Lead Cyber Security Engineer
Posted Updated
Description
JOB SUMMARY
Wissen Technology is hiring a Lead Cyber Security Engineer to drive advanced security testing, penetration testing, vulnerability management, and security assurance initiatives across enterprise applications, networks, cloud platforms, and infrastructure. The role is responsible for leading end-to-end security assessments, mentoring engineers, partnering with stakeholders, and ensuring secure product development and operational resilience across critical business systems.
EXPERIENCE, LOCATION, MODE OF WORK
Experience : 8-14 years
Location : Bangalore
Mode of Work : Hybrid
Mandatory Skills (Must Have)
- Penetration Testing (8+ years performing application, network, and infrastructure assessments)
- Vulnerability Assessments using tools such as Nessus, Burp Suite, Qualys, and Nmap
- Security Incident Response and root cause analysis for enterprise environments
- Threat Modeling and secure design reviews across SDLC
- Cyber Threat Intelligence and attack surface analysis
- Risk Analysis and remediation validation for critical vulnerabilities
- Compliance Risk Management aligned to ISO 27001, NIST, and regulatory standards
- CISSP, CISA, GSEC, Security+, or GCIH certification
-
Optional Skills (Good to Have)
- Cloud security assessment across AWS, Azure, or GCP
- Red Team exercises and adversary simulation
- DevSecOps integration and CI/CD security testing
- SAST/DAST tools such as Veracode, Checkmarx , or Fortify
- Security automation and scripting using Python or PowerShell
-
Professional Attributes & Qualifications
- Education: Bachelors or Masters Degree in Cybersecurity, Information Technology, Computer Science, or related field
- Leadership: Experience mentoring security engineers and leading assessment engagements
- Ownership: Ability to independently manage end-to-end security testing programs
- Communication: Strong written and verbal communication skills with technical and business stakeholders
- Collaboration: Experience partnering with Engineering, Architecture, DevOps, and Risk teams
-
Key Responsibilities
- Lead complex penetration tests and security assessments across applications, infrastructure, and networks
- Develop comprehensive security test plans, methodologies, and reporting standards
- Collaborate with development teams to embed security testing into SDLC processes
- Analyze security incidents and provide actionable remediation recommendations
- Validate remediation effectiveness through retesting and risk verification
- Review system architectures and identify design-level security weaknesses
- Mentor junior security engineers and review assessment deliverables
- Track emerging cyber threats and improve organizational security posture
-
- Track emerging cyber threats and improve organizational security posture
- Mentor junior security engineers and review assessment deliverables
- Review system architectures and identify design-level security weaknesses
- Validate remediation effectiveness through retesting and risk verification
- Analyze security incidents and provide actionable remediation recommendations
- Collaborate with development teams to embed security testing into SDLC processes
- Develop comprehensive security test plans, methodologies, and reporting standards
- Lead complex penetration tests and security assessments across applications, infrastructure, and networks
-
- Collaboration: Experience partnering with Engineering, Architecture, DevOps, and Risk teams
- Communication: Strong written and verbal communication skills with technical and business stakeholders
- Ownership: Ability to independently manage end-to-end security testing programs
- Leadership: Experience mentoring security engineers and leading assessment engagements
- Education: Bachelors or Masters Degree in Cybersecurity, Information Technology, Computer Science, or related field
-
- Security automation and scripting using Python or PowerShell
- SAST/DAST tools such as Veracode, Checkmarx , or Fortify
- DevSecOps integration and CI/CD security testing
- Red Team exercises and adversary simulation
- Cloud security assessment across AWS, Azure, or GCP
-
- CISSP, CISA, GSEC, Security+, or GCIH certification
- Compliance Risk Management aligned to ISO 27001, NIST, and regulatory standards
- Risk Analysis and remediation validation for critical vulnerabilities
- Cyber Threat Intelligence and attack surface analysis
- Threat Modeling and secure design reviews across SDLC
- Security Incident Response and root cause analysis for enterprise environments
- Vulnerability Assessments using tools such as Nessus, Burp Suite, Qualys, and Nmap