{"id":2342730,"url":"https://alion.io/job/dnv-senior-cybersecurity-lead-analyst","title":"Senior Cybersecurity Lead Analyst","company":{"id":1755554,"name":"DNV","domain":"dnv.com","url":"https://alion.io/company/dnv-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":75,"open_postings":28,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":29000,"max_usd":64000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-12T11:08:44Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-13T23:14:42Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Hands-on Senior Cybersecurity Lead to drive application, product, and offensive security across our cloud platforms. You will lead penetration testing, application security, and vulnerability management; embed Secure SDLC/DevSecOps with engineering; secure and govern AI-enabled capabilities; and communicate security risk clearly to technical and business stakeholders. This role sets security practices, mentors others, and raises the security posture of Platform Services.\nKey Responsibilities\nLead application & product security across internal and cloud-based apps; drive Secure SDLC / DevSecOps with engineering.\nOwn penetration testing for web, API, cloud, and infrastructure - scope, test, report, track remediation, retest.\n Run vulnerability management with risk-based prioritisation (exploitability, exposure, impact, asset criticality) and remediation to closure.\nProvide cloud security guidance for AWS and/or Azure - review IAM, network, logging, encryption, and CI/CD security.\nIntegrate security testing and automation into CI/CD; improve secure-coding practices and tooling.\n Secure & govern AI: control and monitor AI/LLM and AI-assisted development risk across the platform (see AI Security & Governance below).\n Review designs to catch risk early (architecture/design reviews, threat modelling).\nLead & collaborate: mentor security staff, act as SME, and partner with Engineering, DevOps, Architecture, and Product.\nGovernance: support ISO 27001 / SOC 2 controls, audits and evidence, and security metrics/reporting.\nAI Security & Governance\nEstablish how AI-related risk is identified, secured, and continuously monitored across AI/LLM-enabled features and AI-assisted development in Platform Services.\nDefine and enforce security controls and governance for AI/LLM-enabled applications and AI-assisted development tools.\nIdentify and mitigate AI-specific risks: sensitive-data and source-code exposure, prompt injection, insecure or hallucinated output, excessive tool/agent permissions, model and supply-chain risk, and IP/licensing exposure.\nApply least-privilege access for AI tools and agents, tool allowlists, retrieval/data-loss controls, and input/output validation.\nContinuously monitor and log AI usage, prompts, and agent actions; set alerting, anomaly detection, and human-oversight/escalation for AI-driven workflows.\nAlign AI usage with responsible-AI and governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF) and provide evidence for audits and customer assurance.\n Flexible work arrangements for better work-life balance\nGenerous Paid Leaves (Annual, Sick, Compassionate, Local Public, Marriage, Maternity, Paternity, Medical leave)\nMedical benefits ( Insurance and Annual Health Check-up)\nPension and Insurance Policies (Group Term Life Insurance, Group Personal Accident Insurance, Travel Insurance)\nTraining and Development Assistance (Training Sponsorship, On-The-Job Training, Training Programme)\nAdditional Benefits (Long Service Awards, Mobile Phone Reimbursement)\nCompany bonus/Profit share.\n*Benefits may vary based on position, tenure/contract/grade level*\nDNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.\n Must Have Experience\n8-10+ years in cybersecurity, with strong hands-on application security and penetration testing.\nWeb and API security testing; solid command of OWASP Top 10 and OWASP API Security Top 10.\nLed penetration testing and vulnerability management activities end-to-end.\nSecure SDLC / DevSecOps and CI/CD security.\nAWS and/or Azure security, including cloud architecture and control reviews.\nStrong communication, stakeholder management, and technical leadership.\nPreferred\nSaaS, product, or cloud-based environment experience; security automation.\nExperience securing AI/LLM-enabled applications or establishing AI governance (e.g., ISO/IEC 42001, NIST AI RMF, OWASP LLM Top 10).\nCertifications: CISSP, CISM, or CEH (equivalent hands-on pen-testing experience also considered).\nEducation\nBachelor's or Master's in Computer Science, Cybersecurity, IT, Engineering, or related - or equivalent experience plus recognized certifications.\nSecurity and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.","description_format":"text","description_chars":4707,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-12T11:39:17Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:1","stale_co","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/dnv-senior-cybersecurity-lead-analyst","json_url":"https://alion.io/job/dnv-senior-cybersecurity-lead-analyst.json","meta":{"generated_at":"2026-10-14T00:30:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":704,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1755554},"rest":"https://alion.io/mcp/rest/get_company?id=1755554"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdnv-senior-cybersecurity-lead-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdnv-senior-cybersecurity-lead-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdnv-senior-cybersecurity-lead-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dnv-senior-cybersecurity-lead-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdnv-senior-cybersecurity-lead-analyst"}]}