Cyber Security Engineer

About us
The Indian Institute of Technology Bombay (IIT Bombay), established in 1958, is one of India's premier institutions for science, engineering, and technology education and research. Recognised as an Institution of Eminence by the Ministry of Education, IIT Bombay consistently ranks among the top universities globally.
Home to world-class faculty, cutting-edge research facilities, and a vibrant academic community, IIT Bombay's Computer Centre provides the critical IT infrastructure that powers teaching, research, high-performance computing, enterprise applications, cloud services, and digital operations across the Institute. The team is responsible for designing, operating, and securing one of India's leading academic technology environments.
Role Overview
The Computer Centre at IIT Bombay is seeking a Cybersecurity Engineer to join its Operations and Services team. This is a highly hands-on technical role for an experienced cybersecurity professional who enjoys implementing, securing, troubleshooting, and continuously improving enterprise security infrastructure. The selected candidate will play a key role in protecting campus IT infrastructure, datacentres, cloud platforms, high-performance computing (HPC) environments, enterprise applications, research systems, and user endpoints.
This role is a contract role and not a purely managerial, governance, audit, or compliance-focused position. We are looking for engineers who remain deeply involved in technical implementation and operational security.
Key Responsibilities
Security Engineering & Infrastructure
Design, deploy, and maintain enterprise cybersecurity solutions across network, server, endpoint, identity, and cloud environments.
Implement Zero Trust principles and defence-in-depth architectures.
Deploy and manage firewalls, IDS/IPS, Web Application Firewalls (WAF), VPNs, secure gateways, and network access controls.
Harden operating systems, applications, and infrastructure using industry best practices and security benchmarks.
Security Operations & Incident Response
Monitor, investigate, and respond to cybersecurity incidents across enterprise infrastructure.
Perform incident triage, containment, eradication, recovery, and root-cause analysis.
Conduct forensic investigations and prepare post-incident reports with preventive recommendations
Vulnerability & Identity Security
Perform vulnerability assessments and coordinate remediation activities.
Support penetration testing and validation of remediation efforts.
Implement and maintain Identity & Access Management (IAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and role-based access controls.
Endpoint, Cloud & Application Security
Deploy and manage Endpoint Detection & Response (EDR/XDR) platforms.
Secure Windows, Linux, macOS, virtualization platforms, cloud infrastructure, enterprise servers, and HPC environments.
Implement secure certificate management, secrets management, API security, and application security best practices.
Security Automation & Technical Leadership
Develop automation for security monitoring, log analysis, and incident response.
Build scripts and tooling to improve operational efficiency.
Maintain SIEM detections, dashboards, and alert tuning.
Mentor junior engineers while contributing to long-term cybersecurity strategy.
Desired Experience & Skills
Bachelor's degree in Computer Science, Information Technology, Electronics, Cybersecurity, or a related discipline.
Approximately 5-9 years of strong hands-on cybersecurity engineering experience.
Experience securing enterprise, campus, datacentre, cloud, or research computing environments.
Strong expertise in enterprise firewalls, IDS/IPS, VPNs, WAF, SIEM, EDR/XDR, vulnerability management, Linux administration, and security operations.
Experience with Python and/or Shell scripting, Ansible (or equivalent automation tools), Git, API integrations, and Infrastructure-as-Code fundamentals.
Familiarity with cloud security, container security, identity management, and enterprise security platforms such as Microsoft Defender, CrowdStrike, SentinelOne, Splunk, Microsoft Sentinel, QRadar, or Elastic is desirable.
Industry certifications such as CISSP, GIAC, CEH, Security+, Microsoft Security, Palo Alto, Fortinet, or Cisco Security certifications are preferred. Equivalent hands-on expertise will also be considered.
Please note: This is a Mumbai-based, on-campus role at IIT Bombay. Only shortlisted candidates will be contacted.

Work arrangement
No