Security Engineer

• Provide strategic direction for the Enterprise Security Strategy at JLL by educating self and others in new security threats across the entire spectrum of JLL applicable technologies.
• Provide strong technical leadership in all aspects of security including end point protection, network security, firewalls, application, and cloud security.
• Provide guidance, governance, and oversight of multiple security efforts in parallel.
• Analyze and communicate benefits and risks associated with IT investments and participates in Regional IT governance and decision making, adhering to standards.
• Ensure applications, processes, and procedures of the Enterprise Application team comply with JLL standards including security policies, change management, SOC2 and other critical business requirements.

Senior Security Architect

• Analyze, build, and maintain Enterprise SAP Security Roles
• Participate in Change Management Processes
• Engage in peer reviews of SAP Security role Changes
• Use Information Security tools for analysis
• Understand and apply knowledge of security system parameters
• Follow routine techniques to resolve issues
• Support SoD/SOX reviews and initiatives

Consultant – SAP Security

• Providing subject‑matter expertise in SAP Security and GRC, leading design, implementation, and support activities across SAP On‑Premise applications such as S/4HANA and GTS, as well as cloud solutions including BTP, IBP, and Ariba
• Partnering closely with SAP process owners, functional teams, and technical stakeholders to understand business requirements, proactively identify risks, and deliver secure, compliant, and scalable solutions
• Leading complex incident resolution and problem management, including root‑cause analysis and preventive control enhancements across SAP Security and GRC domains
• Owning role design, remediation, and optimization, ensuring adherence to least‑privilege principles, segregation of duties (SoD), and audit requirements
• Managing SAP GRC activities end‑to‑end, including Fire Fighter administration and log reviews, GRC workflow management, access risk analysis, mitigation controls, and compliance reporting
• Driving audit and compliance initiatives, supporting SOX and internal/external audits through evidence preparation, control testing, and continuous control improvement
• Leading or contributing to the implementation and enhancement of the full SAP GRC suite, ensuring solutions meet design standards, quality benchmarks, and regulatory obligations
• Mentoring junior analysts and providing technical guidance, helping build team capability and ensuring consistent delivery of high‑quality security services
• Demonstrating strong written and verbal communication skills, effectively influencing stakeholders, documenting designs, and presenting security risks and recommendations to leadership

Senior SAP Security Analyst

• Collaborate with several SAP Process teams and technical teams to understand their requirements
• Support issue fixes and incident resolution in SAP On-Premise Application like S/4, GTS and public cloud solutions like BTP, IBP and Ariba
• Handle other regular Security activities like role design and fixes, supporting audit activities, analyzing and supporting Fire Fighter user administration and log reviews, GRC Workflow activities
• Develop and implement full suite of SAP GRC products
• Implement solutions that meet minimum required design documentation, quality standards, and SOX compliance

SAP Security Associate Analyst

• Architect and Lead SentinelOne Deployments: Design and implement SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions for a wide range of infrastructure and endpoints, ensuring scalable, resilient, and effective protection.
• Integration & Automation: Integrate with other security solutions and automation using APIs.
• Security Policy Management: Define, optimize, and enforce security policies.
• Threat Detection & Incident Response: Collaborate with SOC and IR teams to tune detections and assist in the response to threats.
• Cross-Platform Expertise: Provide deep technical expertise in handling endpoint security for heterogeneous systems.
• Technical Leadership & Documentation: Serve as the subject matter expert and produce architectural diagrams and best practices guides.
• Collaboration & Training: Partner with IT, DevOps, and security teams and provide training on security tools and hygiene.
• Continuous Improvement: Stay updated on emerging threats and recommend enhancements.

Senior Cybersecurity – Endpoint Security, Infrastructure Security

• Responsible for the security and compliance of systems related to our Government Certifications program, to include FIPS, Common Criteria, ITSAR, etc.
• Comfortable leading technical discussions across multi-functional engineering teams and third party auditors
• Support the continuous improvement of the Red Hat environments through automation and maturation of processes
• Support the downstream integration of open-sourced projects; collaborate to develop and implement Red Hat specific capabilities from the upstream
• Research and analyze new tools, technologies and services for technical suitability within a containerized environment
• Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners or within the open-source community

Product Security Engineer – GRC

• Design, configure, and maintain scalable Workday security architecture, including role-based, user-based, and intersection security groups.
• Define and enforce governance standards for Workday security configuration and ongoing maintenance.
• Continuously evaluate and optimize security models to align with organizational and regulatory requirements.
• Manage and administer domain security policies, business process security policies, and proxy access.
• Implement and maintain segmented and least-privilege access models across Workday modules.
• Ensure role assignments are aligned with job responsibilities and organizational hierarchy.
• Partner with GRC, Legal, and Audit teams to ensure adherence to regulatory frameworks (e.g., SOX, GDPR).
• Lead and execute User Access Reviews (UARs), ensuring timely remediation of identified issues.
• Support internal and external audits by providing documentation, audit evidence, and remediation plans.
• Implement and maintain Segregation of Duties (SoD) controls and monitoring processes.
• Configure and review security for inbound and outbound Workday integrations.
• Ensure secure authentication and authorization mechanisms for integrations (e.g., API users, ISUs, certificates).
• Investigate, troubleshoot, and resolve Workday security-related incidents and access issues.
• Collaborate with HR, Payroll, Finance, and IT teams to gather security and reporting requirements.
• Build and support Workday security reports and dashboards.
• Provide guidance on least-privilege access design and security best practices.

Senior Manager, Workday Security

• Partner with engineering and data science teams to design and review AI architectures, including agentic and multi‑agent systems, for security, privacy, and regulatory compliance.
• Perform security reviews of AI/ML systems, including model lifecycle, data pipelines, inference APIs, agent orchestration layers, and third‑party AI services.
• Identify and mitigate risks such as: Data leakage and model exploitation, Prompt injection and indirect prompt manipulation, Agent autonomy risks (over‑permissioned agents, unsafe tool use, uncontrolled action execution), Insecure model deployment and inference exposure.
• Support threat modeling and risk assessments for AI and agent‑driven workflows, assisting teams in implementing practical mitigations.
• Contribute to and operationalize AI and agentic AI security standards, guidelines, and secure design patterns used across the company.
• Evaluate AI platforms, agent frameworks, and vendors to ensure alignment with security, privacy, and compliance requirements.
• Support responsible AI practices related to explainability, oversight, auditability, and controlled autonomy, in collaboration with legal, compliance, and risk partners.
• Act as a trusted security advisor to teams adopting AI, LLM‑based agents, and workflow‑oriented AI systems.
• Participate in design reviews and working sessions focused on secure AI and agent deployment.
• Provide guidance on secure use of generative AI, internal AI platforms, and agent‑based tools interacting with company systems and data.
• Stay current on AI and agentic AI security threats, vulnerabilities, and best practices.
• Recommend improvements to tooling, processes, and controls to strengthen AI security posture.
• Contribute to internal documentation, training materials, and security enablement related to AI and agent usage.

Senior AI Security Engineer

• Devising and engaging mitigation strategies to prevent real time attacks, using Akamai products & platform
• Performing advanced analysis to identify attacks and threats to customer's digital properties and/or their business network
• Communicating with customers regarding challenges and providing updates and results on your mitigation and analysis
• Innovating around tooling development & product enhancement.
• Being a good advocate to customer centricity during day-to-day operations & incidents

Security Architect – Day Shift

• Serve as a lead technical expert and mentor within the security engineering team
• Drive the implementation of advanced security controls
• Guide technical decisions and provide subject matter expertise
• Ensure excellent customer service for internal and external customers
• Manage troubleshooting of Prisma Access for secure remote connectivity
• Design, evaluate and implement security related solutions
• Ensure team adherence to established change control processes
• Collaborate with systems and network engineers
• Lead the incident response team
• Validate security control coverage based on emerging cyber threat intelligence
• Participate in 24x7 on-call rotation

Lead Engineer – Security

• Assess AI systems, tools, and use cases for security, privacy, data protection, IP, and misuse risks, including generative and traditional AI.
• Support AI risk classification, intake reviews, and control validation aligned to enterprise AI governance frameworks.
• Monitor risks related to data leakage, prompt misuse, model drift, third‑party AI exposure, and unauthorized AI usage (AI Shadow IT).
• Partner with Security Operations to support AI‑related incident analysis, reporting, and lessons‑learned activities.
• Support execution of the enterprise AI Governance Policy, including tracking compliance, approvals, and exceptions.
• Assist with regulatory readiness (e.g., AI regulations, data protection laws), translating requirements into governance artifacts, tracking, and evidence.
• Maintain AI inventories, risk registers, metrics, and dashboards to support audit and leadership reporting.
• Help operationalize security‑by‑design and privacy‑by‑design principles across the AI lifecycle.
• Analyze AI usage data, monitoring signals, and security controls to identify trends, gaps, and emerging risks.
• Develop executive‑ready insights and summaries for leadership, risk committees, and audit reviews.
• Track governance KPIs such as AI coverage, risk posture, control adoption, policy compliance, and remediation progress.
• Support continuous improvement by identifying recurring issues and recommending governance enhancements.
• Partner with Legal, Privacy, IT, Product Security, Procurement, and OpCo teams to evaluate AI tools, vendors, and use cases.
• Support education and awareness efforts by translating governance requirements into clear guidance for business and technical teams.
• Contribute to standard work, playbooks, and templates supporting AI governance at scale.

AI Analyst – Security & Governance

• Support end to end SOC alerts workflow.
• Assist in operationalizing the Regular Incident Response Plan and Major Incident Response Plan across teams.
• Work with SOC tools and automation with Google SecOps as the primary SIEM, SOAR, Google Threat Intelligence, Gemini AI integrations and Jira as the authoritative system of record.
• Collaborate with our managed SOC provider (Tier 1) to ensure quality triage, correct escalations, and reduced false positives.
• Investigate alerts, implement playbooks, support incident response activities, and contribute to operational improvements within the SOC.
• Active participation in SOC alert lifecycle: Alert Ingestion → Triage → Routing → Investigation → Determination → Reporting.
• Support incident response coordination during security incidents.
• Ensure strict adherence to Perforce’s Incident Response Policies for regular incidents.
• Support the implementation and tuning of Google SecOps (Chronicle SIEM + SOAR + case management) as the primary detection and workflow platform.
• Execute predefined SOC playbooks aligned with IRP/MIRP guidelines.
• Participate in RCA and post incident reviews.

• Lead the end to end SOC alerts workflow.
• Operationalize the Regular Incident Response Plan and Major Incident Response Plan across teams.
• Own SOC tools and automation (with Google SecOps as the primary SIEM, SOAR, Google Threat Intelligence, Gemini AI integrations and Jira as the authoritative system of record).
• Coordinate with our managed SOC provider (Tier 1) to ensure, low noise of false positives, high quality triage, implementation of playbooks, clean escalations, and measurable MTTD/MTTR improvements.
• This is a hands on leadership role: you will design workflows and playbooks, lead investigations and RCA for high impact incidents, and mentor SOC Engineers and Analysts as we scale from a lean Phase 1 SOC (~2–3 FTE) to an AI enabled mature operations.
• Own the SOC alert lifecycle: Alert Ingestion → Triage → Routing → Investigation → Determination → Reporting.
• Act as Major Incident Manager (MIM) for security events meetings.
• Ensure strict adherence to Perforce’s Incident Response Policies for regular incidents.
• Maintain the SOC Charter, operating model, and guardrails as per the Operationalization Plan, Own the SOC RACI and routing matrix across SOC, CloudOps, IT, Engineering, and the provider.
• Lead design, configuration, and continuous tuning of Google SecOps (Chronicle SIEM + SOAR + case management, Google Threat Intelligence and Gemini integrations) as the primary detection and workflow platform.
• Design and implement automation to:
• o Enrich alerts (asset context, user context, historical activity).
• o Trigger Jira tickets and playbooks based on Google SecOps cases.
• o Support SLA monitoring and notifications (MTTR, remediation timeframes).
• Partner with the Corporate Security on CI/CD and IaC security automation where incident workflows intersect with pipelines (e.g., auto ticketing, auto asset tagging, config drift etc..).
• Define and own a core set of playbooks aligned to IRP/MIRP.
• o Cloud misconfiguration / CSPM alerts.
• o Endpoint malware / suspicious activity.
• o Identity/credential compromise.
• o Application / product security alerts.
• o External threat reports via Security Mailbox or any other threat feeds.
• Oversee False Positives and Exceptions processes.
• Own SOC KPIs and operational metrics.
• Produce and present the Monthly SOC Summary Report.
• Lead RCA and post incident reviews.
• Champion a culture of continuous improvement.
• Act as day to day lead and senior escalation point for SOC Engineers and Analysts in Pune.
• Coach and mentor team members on process adherence and effective alert handling.
• Build strong partnerships with vendors, partners and stake holders, Serve as primary liaison with the Tier 1 provider.

Senior Security Engineer

• Conduct network penetration tests to identify vulnerabilities, misconfigurations, and potential attack vectors
• Simulate real-world attacks to assess the security posture of corporate systems, applications, and infrastructure
• Develop and execute test plans, including reconnaissance, exploitation, post-exploitation, and reporting
• Document findings with clear risk ratings and remediation recommendations
• Collaborate with IT and security teams to validate fixes and retest as needed

Offensive Security Engineer

• Security Research & Architecture, Solution Design & Validation
• Identify whitespace in emerging technologies, especially AI, agent-based platforms, and adjacent Microsoft capabilities, where ProArch can create new security offerings or differentiate existing services.
• Research new platforms and capabilities to determine where clients are struggling, what risks or governance gaps exist, and which use cases have real market value.
• Assess client business requirements, security objectives, and technical constraints to design secure target-state architectures across Microsoft cloud, identity, data, and AI-related platforms.
• Define architectural patterns, trust boundaries, control points, and integration approaches that align security, governance, and operational needs.
• Produce architecture diagrams, reference designs, decision frameworks, and solution blueprints that can be used in both pre-sales and delivery.
• Validate proposed architectures through hands-on testing, design reviews, proof-of-concept work, and early implementation support to confirm feasibility and risk posture.
• Define secure configuration baselines, governance guardrails, identity models, and monitoring expectations for proposed solutions before they are broadly adopted.
• Evaluate architecture decisions for identity, access, data protection, compliance, resilience, and operational risk, and translate findings into clear technical recommendations.
• Create reusable standards, hardening patterns, reference architectures, and implementation guidance that help delivery teams execute consistently.
• Continuously refine architectural standards and recommended patterns based on delivery feedback, technical validation, and evolving platform capabilities.
• Support pre-sales activities by leading or contributing to discovery sessions, architecture workshops, solution framing, proposal input, and technical risk discussions.
• Provide architectural advisory guidance to clients and internal teams to ensure proposed solutions are secure, practical, and aligned to business outcomes.
• Guide early delivery efforts by supporting architecture reviews, control design, implementation decisions, and secure adoption planning for new or evolving services.
• Produce client-ready architecture artifacts, design rationales, standards documentation, and internal guidance that can be reused across sales and delivery motions.
• Present architectural recommendations and security considerations to leadership, client stakeholders, and delivery teams, and feed lessons learned back into solution improvements.

Security Architect

• Plan and execute red team engagements across our cloud infrastructure (AWS/GCP/Azure)
• Simulate realistic attack chains using current threat actor techniques
• Conduct assumed breach scenarios, purple team exercises, and objective-based engagements
• Assess cloud-specific attack surfaces: IAM roles, storage misconfigurations, serverless functions, container workloads, and CI/CD pipelines
• Test Active Directory and hybrid identity environments for attack paths
• Perform web and API application testing
• Build, customize, and maintain offensive tools, scripts, and C2 infrastructure
• Develop and manage red team infrastructure
• Create and maintain repeatable testing methodologies and internal playbooks
• Evaluate and improve detection coverage by working with our blue team
• Write detailed reports that document attack paths and remediation steps
• Present findings to both technical teams and non-technical stakeholders
• Track remediation progress and validate fixes
• Help define the scope, methodology, and maturity of our red team program
• Contribute to internal security standards and secure design reviews
• Mentor junior team members

Offensive Security Engineer – Red Team

• Join our dynamic Internal Audit Team as a Senior IT Audit Manager, focusing on IT audits and cyber security.
• Lead technology audits across the Chief Technology and Transformation Office (divisional IT infrastructure, applications, cloud systems, cyber security, identity and access management) and provide independent assessments for the company.
• Be responsible for the execution of technology audits, managing key stakeholder relationships, and driving high-impact strategic transformation initiatives across the organization.
• Enhance the Internal Audit value proposition by harnessing technologies and tools to improve audit quality on audit coverage for cutting edge technologies like Identity and Access Management (IAM) tools, Generative A.I., Large Language Models, and strategic transformation initiatives.
• Support annual risk assessments focused on Applications, Information, Infrastructure and Cyber Security risks globally.
• Partner with technology stakeholders to identify and assess identity-related vulnerabilities and control gaps through grey box testing.
• Drive and assess adoption of Secure-by-Design principles, validating implementation through security testing across the SDLC and pre-production environments.
• Collaborate with other technology auditors to develop and execute audit programs to support coverage for established, emerging, frontier technologies and related applications/workflows (IAM, Cybersecurity, and AI/GenAI).

Senior IT Audit Manager, Cybersecurity – Technology

• Analyzing system metrics, logs, and traces to identify performance issues, anomalies, or service degradation, and assist in determining root cause.
• Supporting the creation, tuning, and maintenance of monitoring alerts, dashboards, and automated observability workflows.
• Assisting in the development and refinement of observability standards, including instrumentation strategies and telemetry collection practices.
• Contributing to the implementation, evaluation, and optimization of observability platforms and tools (e.g., logging, tracing, metrics systems).
• Promoting a culture of automation and efficiency by helping reduce manual operational effort and improving Cyber Defense processes.
• Participating in Agile software development practices, including sprint planning, stand-ups, and retrospectives.
• Collaborating effectively with engineers, product teams, and stakeholders to ensure reliable delivery of monitoring and observability solutions.
• Supporting a culture of continuous learning, curiosity, and knowledge sharing, with a focus on reliability engineering principles and modern observability practices.

Consultant, Cybersecurity

• Lead and deliver OT cybersecurity engagements, including: OT risk assessments and maturity assessments.
• Architecture and network segmentation reviews.
• Security posture evaluations across SCADA, DCS, PLC, HMI, and ICS environments.
• Perform OT-focused vulnerability assessments and exposure analysis in coordination with engineering and operations teams.
• Implement and operationalize OT monitoring solutions including: Dragos Platform Nozomi Networks Guardian / Vantage.
• Design and validate OT detection and response capabilities, leveraging network traffic analysis, anomaly detection, and threat intelligence.
• Conduct industrial threat modeling and risk quantification aligned to operational impact, safety, and business continuity considerations.
• Develop OT cybersecurity roadmaps and transformation programs, aligned with frameworks such as: IEC 62443, NIST SP 800-82, NCA (KSA) / regional regulatory frameworks.

Cybersecurity Manager – OT Cybersecurity

• Design and develop cybersecurity dashboards and executive reporting packs
• Define and operationalize cybersecurity KPIs and KRIs
• Transform complex security and operational datasets into insights for stakeholders
• Provide commentary and interpretation of cybersecurity metrics
• Collaborate across cybersecurity, risk, finance, and business teams

See all jobs on JobTailor