{"id":3024694,"url":"https://alion.io/job/bce-global-tech-senior-cybersecurity-specialist","title":"Senior Cybersecurity Specialist","company":{"id":6489,"name":"BCE Global Tech","domain":"bceglobaltech.com","url":"https://alion.io/company/bce-global-tech","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-21T18:35:00Z","employer_posted_date":null,"last_verified_at":"2026-10-21T18:35:00Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"We are seeking a Senior Cybersecurity Specialist with strong hands-on experience in implementing, operating, and maturing security controls across enterprise environments. The role requires deep execution capability across asset management, access control, secure development, endpoint security, security testing, AI governance, supplier risk, employee awareness, monitoring and detection, and incident response, with proven expertise in PII / HSPII protection and PCI-DSS compliance. This position plays a critical role in translating security policies, standards, and frameworks into operational, measurable, and enforceable controls.\n\nThe core responsibilities for the job include the following:\n\nAsset and Access Management: \nImplement and maintain asset inventory controls (hardware, software, and cloud assets).\nExecute Identity and Access Management (IAM) controls, including RBAC, least privilege, MFA, and periodic access reviews.\nSupport onboarding/offboarding automation and privileged access monitoring.\n\nSecure Development and DevSecOps: \nImplement secure SDLC controls aligned with organizational standards.\nIntegrate security checks into CI/CD pipelines (SAST, DAST, SCA).\nWork with engineering teams to remediate code-level security issues.\nEnsure secure configuration baselines for applications and APIs.\n\nEndpoint Security: \nDeploy and manage endpoint protection controls (EDR/XDR).\nEnforce device hardening, disk encryption, patching, and configuration standards.\nMonitor endpoint compliance and address control gaps.\n\nSecurity Testing and Assurance: \nExecute the vulnerability management lifecycle, including scanning, validation, prioritization, and remediation tracking.\nCoordinate and support penetration testing and security assessments.\nValidate closure of findings and maintain evidence for audits.\n\nAI Governance and Emerging Technology Risk: \nImplement AI governance controls covering data usage, model risk, access control, logging, and monitoring.\nSupport AI risk assessments and document compliance with responsible AI principles.\nEnsure protection of sensitive data used in AI/ML workloads.\n\nSupplier and Third-Party Risk Management: \nExecute supplier security assessments and due diligence.\nTrack remediation of third-party security findings.\nMonitor high-risk vendors for ongoing compliance.\n\nEmployee Security Awareness: \nSupport execution of security awareness and phishing simulation programs.\nEmbed security training aligned with role-based risks.\nMeasure effectiveness through metrics and behavior improvement.\n\nMonitoring, Detection, and SOC Support: \nImplement and tune security monitoring and detection controls.\nIntegrate logs into SIEM and ensure alert coverage for critical risks.\nSupport threat detection use cases and reduce false positives.\n\nIncident Response: \nExecute incident detection, containment, eradication, and recovery activities.\nParticipate in incident response drills and post-incident reviews.\nMaintain IR documentation, playbooks, and evidence logs.\n\nData Protection and Compliance: \nImplement controls for PII and Highly Sensitive PII (HSPII) protection, including encryption, access controls, logging, and retention.\nExecute and maintain PCI-DSS technical and operational controls.\nSupport internal and external audits with accurate evidence.\n\nRequirements: \nBachelor's degree in computer science or equivalent.\n8+ years of experience in cybersecurity or information security roles.\nProven track record of control implementation, execution, and operationalization.\nExperience working with engineering, IT, SOC, risk, and compliance teams.\nRelevant certifications (preferred): CISSP, CISM, or CISA, AZ-500 / AWS Security Specialty, CEH / Security+ / GIAC (role dependent).\n8+ years of cybersecurity experience.\nStrong control implementation background.\nRelevant certifications (CISSP, CISM, CISA preferred).\n\nTechnical Skills: \nStrong experience implementing security controls hands-on, not just defining policy.\nPractical knowledge of: IAM, PAM, Endpoint Security (EDR/XDR), Vulnerability Management tools, SIEM / SOC operations, Secure SDLC, and DevSecOps tooling.\nSolid understanding of PCI-DSS, PII/HSPII protection, and data security principles.\nFamiliarity with cloud security controls (AWS/Azure/GCP preferred).\nFrameworks and Standards (Implementation Focus): ISO 27001 / ISO 27002 NIST CSF / NIST 800-53 PCI-DSS, Zero Trust concepts, privacy and data protection controls\n\nKey Competencies: \nExecution-driven and outcome-focused\nStrong stakeholder collaboration\nRisk-based decision-making\nClear documentation and evidence management\nHigh ownership during incidents and audits\n\nAsset and Access Management: \nImplement and maintain asset inventory controls.\nExecute IAM controls, including RBAC, least privilege, MFA, and access reviews.\n\nSecure Development and DevSecOps: \nImplement secure SDLC controls and integrate security tooling into CI/CD pipelines.\nWork with engineering teams to remediate vulnerabilities.\n\nEndpoint Security: \nDeploy and manage EDR/XDR solutions.\nEnforce device hardening, encryption, and patching.\n\nSecurity Testing and Assurance: \nExecute vulnerability management and penetration testing activities.\nTrack remediation and maintain audit evidence.\n\nAI Governance: \nImplement AI governance and model risk controls.\nEnsure sensitive data protection in AI workflows.\n\nSupplier Risk Management: \nConduct supplier security assessments and track remediation.\n\nEmployee Security Awareness: \nSupport execution of awareness and phishing simulation programs.\n\nMonitoring and Detection: \nImplement monitoring controls and tune SIEM alerts.\n\nIncident Response: \nParticipate in incident handling, drills, and post-incident reviews.\n\nData Protection and Compliance: \nImplement PII/HSPII controls.\nExecute PCI-DSS technical and operational requirements.\nSkills\nCISA, CISM, CISSP, IAM, MFA, PAM, PCI, PCI-DSS, RBAC, cybersecurity, identity access, information security","description_format":"text","description_chars":5950,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Mobile Networks","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-21T18:35:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/bce-global-tech-senior-cybersecurity-specialist","json_url":"https://alion.io/job/bce-global-tech-senior-cybersecurity-specialist.json","meta":{"generated_at":"2026-10-23T11:51:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18033,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6489},"rest":"https://alion.io/mcp/rest/get_company?id=6489"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbce-global-tech-senior-cybersecurity-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbce-global-tech-senior-cybersecurity-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbce-global-tech-senior-cybersecurity-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bce-global-tech-senior-cybersecurity-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbce-global-tech-senior-cybersecurity-specialist"}]}