Nava

Role &amp; Responsibilities
<ul>
<li>Lead end-to-end cybersecurity strategy for enterprise clients, including threat modeling, vulnerability assessments, and red team/blue team simulation.</li>
<li>Design, implement, and enforce security controls (NIST, ISO 27001, CIS Controls) across cloud (AWS/Azure/GCP) and on-prem environments.</li>
<li>Direct incident response playbooks, conduct post-mortems, and drive security hygiene across SIEM (Splunk, Sentinel), EDR, and SOAR platforms.</li>
<li>Collaborate with DevOps and engineering teams to embed DevSecOps practices, automate security testing, and integrate SAST/DAST tools into CI/CD pipelines.</li>
<li>Own third-party risk assessments, vendor security audits, and compliance reporting (GDPR, DPDP, PCI-DSS).</li>
<li>Mentor junior analysts, lead security training programs, and maintain SOC operational readiness and threat intelligence sharing protocols.</li>
</ul>
Skills &amp; Qualifications
Must-Have
<ul>
<li>SIEM (Splunk, Microsoft Sentinel)</li>
<li>EDR/XDR (CrowdStrike, SentinelOne)</li>
<li>Cloud Security (AWS Security Hub, Azure Security Center)</li>
<li>Incident Response &amp; Threat Hunting</li>
<li>NIST CSF, ISO 27001, CIS Controls</li>
<li>SOAR Platforms (Demisto, Palo Alto Cortex)</li>
<li>Penetration Testing &amp; Red Teaming</li>
<li>Security Automation (Python, Terraform, Ansible)</li>
</ul>
Preferred
<ul>
<li>Certifications: CISSP, CISM, GIAC, OSCP</li>
<li>Experience with MITRE ATT&amp;CK Framework</li>
<li>Knowledge of DPDP Act and India-specific compliance landscape</li>
</ul>
Benefits &amp; Culture Highlights
<ul>
<li>Work alongside top-tier cyber defenders in a high-impact, mission-driven environment.</li>
<li>Access to cutting-edge threat intelligence feeds, adversary simulation labs, and global CISO roundtables.</li>
<li>Flexible work hours, continuous learning stipends, and rapid career growth path from Lead to CISO advisory roles.</li>
</ul>