Skip to main content
Posted 12 March, 2026

Cyber Security Engineer

Simform
Ahmedabad, Gujarat 380058, IN Full Time
Reference: limuibnk1trZ

Job Title: Cyber Security Engineer Location: Ahmedabad, Gujarat Job Type: Full Time About Simform: Simform is a premier digital engineering company...

Expand

Job Title: Cyber Security Engineer
Location: Ahmedabad, Gujarat
Job Type: Full Time
About Simform:
Simform is a premier digital engineering company specialising in Cloud, Data, AI/ML, and Experience Engineering to create seamless digital experiences and scalable products. Simform has strong capabilities across Microsoft, Google Cloud, and Databricks. With a presence in 6 countries, Simform primarily serves North America, the UK, and the Northern European market. Simform is well-recognised as one of the most reputed employers in the region, having created a thriving work culture with a high work-life balance that gives a sense of freedom and opportunity to grow

Simform takes pride in being one of the most reputed employers in the region, having created a thriving work culture with a high work-life balance that gives a sense of freedom and opportunity to grow.

Role Overview:
We are seeking a skilled Cyber Security Engineer with 4+ years of hands-on experience in Vulnerability Assessment & Penetration Testing (VAPT), compliance, AI security, cloud security, mobile security, threat analysis, and governance. The candidate will be responsible for identifying security weaknesses, implementing controls, ensuring regulatory compliance, and strengthening the organization’s overall security posture.

Responsibilities:
VAPT & Offensive Security
  • Perform Vulnerability Assessment and Penetration Testing for web, API, mobile (Android/iOS), cloud, and network environments using tools such as Burp Suite, OWASP ZAP, Nessus, Qualys, and Acunetix.
  • Conduct authenticated and unauthenticated testing.
  • Validate vulnerabilities and provide risk-rated remediation guidance.
  • Perform secure configuration reviews and attack surface analysis.
  • Execute red team style simulations and adversary emulation.

Compliance & Governance
  • Support compliance initiatives such as SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, etc.
  • Assist in audit preparation, evidence collection, and remediation tracking
  • Map controls to regulatory and industry frameworks
  • Maintain documentation required for internal and external audits
AI & Application Security
  • Perform security assessments of AI/LLM-based applications
  • Test for prompt injection, data leakage, model misuse, and abuse scenarios
  • Conduct secure code reviews and SAST/DAST coordination
  • Evaluate third‑party components and libraries for vulnerabilities

    Cloud Security
  • Assess security posture across AWS, Azure, and GCP environments using tools such as ScoutSuite, Prowler, Trivy, kube-bench, and kube-hunter.
  • Review IAM configurations, network security, storage exposure, and logging.
  • Identify misconfigurations and implement cloud security best practices.
  • Support container and Kubernetes security assessments.

    Mobile Security
  • Perform mobile application security testing for Android and iOS using tools such as MobSF, Frida, Objection, APKTool, and JADX.
  • Conduct static and dynamic analysis.
  • Evaluate data storage, authentication, API usage, and reverse engineering risks

    Threat Monitoring & Analysis
  • Analyze security alerts, logs, and incidents from multiple sources using SIEM and EDR platforms such as Microsoft Sentinel, Splunk, ELK Stack, QRadar, Defender for Endpoint, CrowdStrike, or SentinelOne.
  • Perform client log analysis (SIEM, EDR, firewall, cloud logs)
  • Conduct threat hunting using MITRE ATT&CK techniques
  • Support incident response investigations and root cause analysis

    Risk Management & Controls
  • Maintain and update risk register
  • Perform risk assessments and business impact analysis
  • Recommend and implement security controls
  • Track remediation status and risk acceptance
  • Conduct password and secrets security assessments using tools such as Hashcat and John the Ripper.

    Security Awareness, Policies & Documentation
  • Plan and deliver cyber security awareness training sessions for employees, contractors, and stakeholders
  • Develop training materials, phishing simulations, and awareness campaigns
  • Promote secure behavior and educate users on emerging threats (phishing, social engineering, ransomware, etc.)
  • Track training completion and effectiveness metrics
  • Create and maintain security policies, standards, procedures, and guidelines
  • Develop secure configuration baselines and hardening standards
  • Conduct security awareness inputs for stakeholders

    Security Operations Support
  • Collaborate with DevOps, IT, and development teams to remediate issues
  • Validate fixes through retesting
  • Support secure SDLC initiatives

    Frameworks & Standards Knowledge
  • Strong working knowledge of:
  • OWASP Top 10 (Web)
  • OWASP API Security Top 10
  • SANS Top 25 Software Errors
  • OSSTMM (Open Source Security Testing Methodology Manual)
  • MITRE ATT&CK Framework
  • Additional desirable frameworks:
  • NIST Cybersecurity Framework (CSF)
  • NIST SP 800-53 / 800-171
  • CIS Critical Security Controls
  • ISO/IEC 27001 & 27002
  • PCI DSS
  • SOC 2 Trust Services Criteria
  • Cloud Security Alliance (CSA CCM)
Skills and Qualifications:
  • Strong understanding of networking, protocols, and system security
  • Knowledge of authentication mechanisms (OAuth, SAML, JWT, MFA)
  • Familiarity with secure coding principles and common vulnerabilities
  • Ability to interpret logs and correlate events across platforms
  • Report writing with clear technical and executive summaries
  • Strong analytical and problem‑solving skills

Education & Certifications (Preferred)
  • Bachelor’s degree in Computer Science, Cyber Security, or related field
  • Relevant certifications such as:
  • CEH, OSCP, eJPT, PNPT
  • Security+, CySA+, CASP+
  • CCSP, CCSK (Cloud Security)
  • ISO 27001 Lead Implementer/Auditor
  • GIAC certifications (GPEN, GWAPT, GCIH, etc.)
    Experience-
  • 4+ years of hands‑on experience in cyber security or VAPT roles.
  • Proven experience delivering security assessments and remediation guidance
  • Experience working with cross‑functional teams and clients

    Key Competencies
  • Attention to detail and strong documentation skills
  • Ability to prioritize multiple projects
  • Strong communication and stakeholder management
  • Ethical mindset and confidentiality awareness

    Nice to Have
  • Experience in red teaming or adversary simulation
  • DevSecOps exposure and CI/CD security integration
  • Scripting skills (Python, PowerShell, Bash)
  • Experience with threat intelligence platforms
  • Knowledge of data privacy regulations and DPIA processes

Why Join Us:
  • Young Team, Thriving Culture
  • Flat-hierarchical, friendly, engineering-oriented, and growth-focused culture.
  • Well-balanced learning and growth opportunities
  • Free health insurance.
  • Office facilities with a game zone, in-office kitchen with affordable lunch service, and free snacks.
  • Sponsorship for certifications/events and library service.
  • Flexible work timing, leaves for life events, WFH and hybrid options




This listing expired on 25 Mar. Applications are no longer accepted.

Below are some other jobs we think you might be interested in.

  • Cyber Security Analyst
    • UltraViolet Cyber
    • Hyderabad
    We are seeking an experienced and technically proficient Security Analyst in our rapidly growing and dynamic shared services team. The ideal...
    13 May
  • Cyber Security Lead
    • TAC Security
    • Delhi, DL, IN
    Job Description Role Summary We are seeking an experienced and highly motivated Information Security professional to lead enterprise-wide cyber security...
    21 May
  • Cyber Security Lead
    • TAC Security
    • New Delhi, DL, IN
    Job Description Role Summary We are seeking an experienced and highly motivated Information Security professional to lead enterprise-wide cyber security...
    21 May
  • Cyber Security Engineer
    • Coforge
    • Noida, UP, IN
    Job Description Job Title: Cyber Security Engineer\nKey Skills : PAM, Thycotic(Delinea), SSO, AD, CyberArk\nExperience : 3 - 5 Years\nLocation :...
    07 Jun
  • Cyber Security Engineer
    • Coforge
    • Kanpur, UP, IN
    Job Description Job Title: Cyber Security Engineer\nKey Skills : PAM, Thycotic(Delinea), SSO, AD, CyberArk\nExperience : 3 - 5 Years\nLocation :...
    07 Jun
  • Cyber Security Engineer
    • Diverse Lynx
    • bengaluru,Karnataka,560063
    JD: Total Yrs. of experience 5 + Yrs Detailed JD (Roles and Responsibilities) The Cyber Security Engineer works in conjunction with the...
    30 May
  • Cyber Security Engineer
    • Utthunga
    • Bengaluru, KA, IN
    Job Description 🔐 Defend. Detect. Transform. Step into a role where your cybersecurity expertise protects enterprise ecosystems and drives digital...
    21 May
  • Cyber Security Engineer
    • FNZ
    • Pune District, MH, IN
    Job Description Role Overview FNZ is building a global Cyber Platform Engineering function responsible for the operation, reliability, and evolution of...
    01 Jun
  • Cyber Security Engineer
    • Diverse Lynx
    • Pune,Maharashtra
    JD for Cyber Security Engineer. Role name: Developer Role Description: Design, implement, and manage security tools and solutions (e.g., SIEM,...
    18 May
  • Cyber Security Engineer
    • 5paisa
    • Thāne, MH, IN
    Job Description Cyber Security Engineer – Roles & Responsibilities (JD) Role Summary The Cyber Security Engineer is responsible for designing,...
    23 May
  • Cyber Security Engineer
    • CSC (Corporation Service Company)
    • Bangalore,Karnataka,IN,560100
    Role: Cyber Security EngineerLocation: Bangalore Work Schedule: 12PM IST - 9PM IST Working Model: Hybrid Intro:We are seeking a talented, motivated,...
    13 May
  • Cyber Security Engineer
    • Diverse Lynx
    • Bengaluru,,Karnataka,560063
    L2 – Support – Microsoft Security Engineer –Job Title: Security Engineer – L2 – Support – Microsoft Security Engineer Description: We are seeking a...
    29 May
  • Cyber Security Engineer
    • FNZ
    • Pune, MH, IN
    Job Description Role Overview FNZ is building a global Cyber Platform Engineering function responsible for the operation, reliability, and evolution of...
    21 May
  • Cyber Security Engineer
    • Resideo
    • Bangalore,Karnataka,IN,560103
    The Cyber Security Engineer is a key member of our global Security Operations team, supporting a Gartner Level 4 SOC maturity environment. This role...
    13 May
  • Cyber Security Engineer
    • iFalcon Consultancy Services LLP
    • Vadodara, GJ, IN
    Job Description Location: Vadodara, Gujarat Work Mode: Full-Time | Work from Office Experience: 2 - 5 years of experience in: SIEM/SOAR...
    04 Jun
  • Cyber Security Engineer
    • Quantiphi
    • Mumbai, MH, IN
    Job Description Role: Senior Cybersecurity Engineer Experience Level: 3-10 years Work location: Mumbai, Bangalore, Trivandrum Roles &...
    21 May
  • Cyber Security Engineer
    • Welldoc, Inc.
    • Bangalore,Karnataka,India,560078
    Job Description -We are looking for a Security Engineer with less than six years of cybersecurityexperience who has a solid grasp of the CIA Triad and...
    21 May
  • Cyber Security Engineer
    • Zensar Technologies
    • Bangalore, Karnataka, India
    The engineer will function as operations & engineering resources within the Data Security Posture Management (DSPM) team, supporting the implementation...
    30 May
  • Cyber Security Engineer
    • Quantiphi
    • Bengaluru, KA, IN
    Job Description Role: Senior Cybersecurity Engineer Experience Level: 3-10 years Work location: Mumbai, Bangalore, Trivandrum Roles &...
    21 May
  • Cyber Security Engineer
    • Quest Global
    • India
    Job Requirements At Quest Global, it's not just what we do but how and why we do it that makes us different. With over 25 years as an engineering...
    05 Jun