IndiGo is India’s largest and most preferred passenger airline and amongst the fastest growing airlines in the world.We have a simple philosophy: offer fares that are affordable, flights that are on time, and provide a courteous and hassle-free travel experience across our unparalleled network. We show that low cost does not mean low quality. With our fleet of over 320 aircraft, we operate well over 2000+ daily flights, connecting over 118 destinations (of which 32 international), welcoming 100 million customers on board last year. We have an industry leading on-time performance and one of the highest customer NPS in the Indian spanet. At IndiGo, we will continue to extend our scope, by spreading our wings internationally, developing from a domestic carrier to a global aviation giant.
Department: Digital Location: Gurgaon, IndiaWork Mode: Onsite
Key Responsibilities:• Lead and mentor a high-performing team of cyber security analysts and engineers.• Develop and deliver training programs to upskill the team continuously.• Build and promote a security-first culture across departments.• Perform end-to-end VAPT on web/mobile applications, APIs, cloud workloads, and network infrastructure.• Identify, analyse, and report security vulnerabilities with actionable remediation guidance.• Validate fixes and ensure effective closure of identified security gaps.• Conduct deep-dive penetration testing and simulate adversary tactics and attack chains.• Maintain and enhance penetration testing methodologies, tools, and documentation.• Collaborate with stakeholders to define and enforce security policies, configurations, and best practices.• Ensure alignment with relevant compliance requirements (e.g., ISO 27001, PCI DSS, NIST).• Conduct risk assessments and define strategic mitigation plans.• Lead incident response efforts for suspected or confirmed breaches.• Create and maintain incident response plans, playbooks, and escalation protocols.• Work closely with internal/external teams to investigate and resolve security issues efficiently.• Prepare clear, concise technical and executive-level reports.• Monitor and evaluate emerging security threats, technologies, and attack techniques.• Champion the adoption of cyber security best practices across all layers of the enterprise.
Mandatory Tool Expertise:• Akamai Security Configurations – deep expertise in WAF, Kona Site Defender, Bot Manager Premier (BMP), and threat mitigation.• Cymulate (Breach & Attack Simulation) – proven experience in configuring scenarios and interpreting results.• Grafana – strong ability to build security dashboards and interpret time-series monitoring data.• OpenText Fortify – expert-level proficiency in static application security testing (SAST), managing scan pipelines, interpreting results, and driving secure coding practices.• Datadog Security – observability and threat correlation experience preferred.
Certifications (Preferred):• CISSP, OSCP, CEH • Akamai WAF Certification• Akamai BMP Certification
Qualifications:• Bachelor’s or Master’s degree in Cyber Security, Computer Science, Information Technology, or related discipline.• 7–8 years of experience in cyber security, with core focus on VAPT, manual testing, and application security.• In-depth knowledge of:o OWASP Top 10o Security assessment tools like Burp Suite, Nmap, Metasploit, Nessus, and otherso Security integration in CI/CD pipelines• Familiarity with secure coding practices across multiple languages.
Additional information
At IndiGo, we believe in the innate strength of an energetic, diverse, and inclusive workforce, where the viewpoints and life experiences of our employees help us foster strong connection with all our customers. Our diversity equity and inclusion efforts are designed to attract, nurture, and advance the lives of our employees and customers irrespective of their, but not limited to, gender, race, color, religion, caste, creed, ethnicity, origin, language, social and economic status, sexual orientation, persons with disabilities, nationality, age, marital and maternity status.
IndiGo does not charge fees for Job Interviews, Registration, Verification or Offer Letters. All Official communication will be from verified IndiGo IDs (e.g., xxxgoindigo.in). Please report any fake job offer to eco.goindigo.in
At IndiGo we are committed to fostering an inclusive and equitable workplace. All employment decisions are made solely on the basis of merit and qualifications, without regard to a candidate’s gender, race, color, religion, caste, creed, ethnicity, language, sexual orientation, marital status, maternity status, disability, or social and economic background’
