Principal Production Services

Job Details

Job Title: Principal Production Services

Country: IN

City: Mumbai

Skill Category: ITTechnology

Job Summary

We are seeking a skilled Automation Engineer to join our Information Security team within the Automation AI function. This role combines Python development expertise with modern AI application development to drive intelligent automation initiatives across our security operations. The ideal candidate will bring hands-on experience building web applications, APIs, and AI-powered solutions, and security orchestration playbooks while maintaining a solid understanding of cybersecurity principles. You will work at the intersection of security, automation, and AI to transform how our organization approaches information security challenges.

Key Objectives

We are looking for a talented and experienced professional to join our team as Security Engineer with specific focus on network security and boundary controls. In this role, you will be part of a team leading the engineering, development, and implementation of a robust and scalable information security solutions to protect Nomura's critical assets. This role is technical and hands-on as the security architecture and engineering strategy and roadmap are being developed and requires deep understanding of network security and best practices in cybersecurity. It requires the development and implementation of processes, policies, standards, and solutions in collaboration with the Global Head of information security engineering and key stakeholders. You will play a key role in ensuring the resilience and effectiveness of network security solutions.

Key Responsibilities

• Network Security Architecture Strategy: Develop and maintain a deep understanding of the organization's network security needs across on-premise and cloud environments. Design and implement comprehensive security architectures that protect network infrastructure from unauthorized access, data loss, and emerging security threats while aligning with business objectives and the Security Risks and Controls Framework.
• Web Application DDoS Protection Engineering: Lead the design, deployment, and management of web application firewall solutions including advanced bot protection, API security controls, and distributed denial-of-service mitigation. Develop automation frameworks leveraging RESTful APIs integrated with DevOps/CI-CD pipelines to enable policy-as-code deployment, rule management, and configuration-as-code practices for scalable security operations.
• Network Detection Response Operations: Deploy and manage network detection and response (NDR) platforms for real-time visibility into east-west and north-south traffic patterns. Analyze network telemetry, detect anomalous behavior, investigate security incidents, and develop detection use cases to identify threats including lateral movement, data exfiltration, and command-and-control communications.
• Secure Web Gateway Cloud Proxy Management: Operate and optimize secure web gateway and cloud proxy solutions to enforce internet access policies, URL filtering, SSL/TLS inspection, and data loss prevention controls. Manage policy frameworks for user and application traffic, integrate with identity providers, and ensure secure access for remote and on-premise users.
• Zero-Trust Micro-Segmentation Implementation: Design and deploy micro-segmentation technologies to enforce zero-trust network access controls and application dependency mapping. Develop segmentation policies based on application workflows, implement least-privilege network access, and reduce lateral movement attack surface across data center and cloud workloads.
• Technology Evaluation Deployment: Evaluate and deploy network security technologies and tools to enhance security posture. Lead proof-of-concept initiatives, conduct market research, and collaborate with cross-functional teams including architecture, infrastructure, and application development to assess control alignments, integration requirements, and business fit before making investment recommendations.
• Security Policy Standards Governance: Develop and enforce security policies, standards, and technical guidelines in alignment with regulatory requirements (PCI-DSS, SOC2, regional data protection regulations) and network security best practices. Ensure policy frameworks address emerging threats and remain practical for operational implementation across all network security technologies.
• Operational Maturity Service Excellence: Develop operational models and drive maturity elevation across all network security technologies in alignment with industry frameworks (ITIL, NIST, ISO). Establish KPIs, operational metrics, and continuous improvement programs to achieve target maturity levels for detection, response, prevention, and recovery capabilities.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.