Brightspark

Security engineering jobs in Bengaluru

Cyber security jobs in Bengaluru: application, cloud and detection roles, the skills and certifications employers want, and interview tips.

Security covers many different jobs. Application and product security engineers find and fix weaknesses in the software a company builds. Cloud security engineers secure infrastructure and identity. Detection engineers and security operations (SOC) analysts watch for attacks and respond to them, and offensive security engineers test defences by attacking them.

Bengaluru hosts security teams for banks, global product companies and security vendors, and many companies run their security operations centres here. Demand has grown with India's data protection law and regulators' rules on banks and fintechs.

What the work involves

  • Review designs and code for security flaws, and help developers fix them.
  • Run and tune scanners for code, dependencies, containers and cloud configuration.
  • Write detection rules, investigate alerts and lead incident response.
  • Run penetration tests and threat models on new features.
  • Manage identity, secrets and access policies across the company.

The market right now

From the open roles Brightspark is tracking today, collected from employers' career sites and open job boards. Updated through the day.

73open roles
31in Bengaluru
42remote, open to India

Work mode, where stated: Remote 41 · On-site 7 · Hybrid 1

Skills asked for most

  1. Automation 38
  2. Compliance 26
  3. AWS 25
  4. Incident Response 24
  5. Observability 24
  6. Python 24
  7. Mentoring 19
  8. Vulnerability Management 18
  9. Azure 17
  10. SIEM 17
  11. Cloud Security 16
  12. Networking 16

Hiring the most

  1. Cisco 4
  2. Microsoft 4
  3. Everpure 3
  4. One Identity 3
  5. Adobe 2
  6. Amazon 2
  7. Bosch Group 2
  8. Harness 2
  9. LionHires 2
  10. Okta 2

Skills employers look for

  • Web application security (OWASP Top 10)
  • Cloud security on AWS, Azure or GCP
  • Networking and Linux internals
  • Scripting in Python or Go
  • SIEM and EDR tools
  • Threat modelling
  • Identity and access management

How interviews usually run

Expect deep technical questions in your area: how a specific attack works and how to stop it, how you would secure a login flow, or how you would investigate a suspicious process. Many teams give a practical exercise such as reviewing vulnerable code, analysing logs from an incident or attacking a test application.

Product security roles often include a coding round, because the job involves writing tooling and fixes, not only finding problems.

How to stand out

  • Share write-ups of vulnerabilities you found (through bug bounties or capture-the-flag events), within responsible disclosure rules.
  • Pick a specialism and go deep rather than listing every tool.
  • Recognised certifications such as OSCP for offensive roles or a cloud security specialty help get past screening.

Courses to learn the skills

Hand-picked for the skills this role asks for most. Start with the free tutorials; the paid courses go deeper and often include hands-on labs.

Free

Paid

Paid courses are rated 4.0 or higher by at least 1,000 learners. Prices vary with frequent sales, so check before you buy.

Certifications worth knowing

Recognised by hiring managers for this kind of role. A certificate rarely replaces experience, but it helps at screening and is a structured way to fill a gap.

Disclaimer

Please read this carefully and proceed with caution.

  • Brightspark collects jobs from two kinds of source, and labels each job with which: the careers sites of employers we have chosen to collect from, and open job boards, where any company can post. Choosing which careers sites to collect from is the only selection we make: we do not check individual listings or employers. Check every posting on the company’s own careers site before you apply.
  • Be aware of job scams. A genuine employer will never ask you to pay a fee for an application, interview, training, equipment or an offer letter, and will not ask for bank details, OTPs or ID documents before a formal offer.
  • Proceed with caution when sharing personal information, and report suspicious postings to the platform that published them or at cybercrime.gov.in.
  • Brightspark is provided “as is”, without warranties of any kind. Brightspark and its makers are not responsible for any loss or damage, direct or indirect, arising out of the use of this site or of any job, employer or link listed on it.

This works alongside our Terms of use and Privacy policy, which say how the service works and how your data is handled.