Principal Production Services

Nomura Overview:

Nomura is a financial services group with an integrated global network. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its four business divisions: Wealth Management, Investment Management, Wholesale (Global Markets and Investment Banking), and Banking. Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit www.nomura.com .

Nomura Services, India supports the group’s global businesses. With world-class capabilities in trading support, research, information technology, financial control, operations, risk management and legal support, the firm plays a key role in facilitating the group’s global operations across four international regions.

At Nomura, creating an inclusive workplace is a priority. Our approach to inclusion encompasses a variety of initiatives, including sensitization campaigns, implementing conducive policies & programs, providing infrastructure support and engaging in community events. Over time, we have made meaningful progress in these areas, and this commitment has been well-recognized across the industry. We are proud recipients of the prestigious Top 10 Employers award by the India Workplace Equality Index (IWEI), IWEI Gold Employer of Choice awards, India CSR Leadership Award 2024 for Holistic Village Development Program and the YUVA Unstoppable Changemaker Awards.

Divisional Overview:

Powai Information security division is an integral part of Nomura where mostly support functions are delivered out of this entity. We mainly support Nomura wholesale business.

Senior management takes a hands-on approach within the department, and is keen to reward hard work, enthusiasm and success. Nomura presents a unique opportunity to learn and gain experience of a broad range of products and business lines within a supportive setting and surrounded by skilled professionals.

Business Overview:

We are seeking a skilled Automation Engineer to join our Information Security team within the Automation & AI function. This role combines Python development expertise with modern AI application development to drive intelligent automation initiatives across our security operations. The ideal candidate will bring hands-on experience building web applications, APIs, and AI-powered solutions, and security orchestration playbooks while maintaining a solid understanding of cybersecurity principles. You will work at the intersection of security, automation, and AI to transform how our organization approaches information security challenges.

What We Offer:

- We support employee wellbeing by ensuring a sense of purpose and belonging.

- We offer a comprehensive range of wellbeing services which allows employees to get access to the assistance they need at any point in their wellbeing journey.

- Our bespoke benefits support employees and their family’s holistic wellbeing and are inclusive of diverse identities and family structures.

Key objectives critical to success

We are looking for a talented and experienced professional to join our team as Security Engineer with specific focus on network security and boundary controls. In this role, you will part of a team leading the engineering, development, and implementation of a robust and scalable information security solutions to protect Nomura’s critical assets. This role is technical and hands-on as the security architecture and engineering strategy and roadmap are being developed and requires deep understanding of network security and best practices in cybersecurity. It requires the development and implementation of processes, policies, standards, and solutions in collaboration with the Global Head of information security engineering and key stakeholders You will play a key role in ensuring the resilience and effectiveness of network security solutions.

Key Responsibilities

- Network Security Architecture & Strategy: Develop and maintain a deep understanding of the organization's network security needs across on-premise and cloud environments. Design and implement comprehensive security architectures that protect network infrastructure from unauthorized access, data loss, and emerging security threats while aligning with business objectives and the Security Risks and Controls Framework.

- Web Application & DDoS Protection Engineering : Lead the design, deployment, and management of web application firewall solutions including advanced bot protection, API security controls, and distributed denial-of-service mitigation. Develop automation frameworks leveraging RESTful APIs integrated with DevOps/CI-CD pipelines to enable policy-as-code deployment, rule management, and configuration-as-code practices for scalable security operations.

- Network Detection & Response Operations : Deploy and manage network detection and response (NDR) platforms for real-time visibility into east-west and north-south traffic patterns. Analyze network telemetry, detect anomalous behavior, investigate security incidents, and develop detection use cases to identify threats including lateral movement, data exfiltration, and command-and-control communications.

- Secure Web Gateway & Cloud Proxy Management : Operate and optimize secure web gateway and cloud proxy solutions to enforce internet access policies, URL filtering, SSL/TLS inspection, and data loss prevention controls. Manage policy frameworks for user and application traffic, integrate with identity providers, and ensure secure access for remote and on-premise users.

- Zero-Trust Micro-Segmentation Implementation : Design and deploy micro-segmentation technologies to enforce zero-trust network access controls and application dependency mapping. Develop segmentation policies based on application workflows, implement least-privilege network access, and reduce lateral movement attack surface across data center and cloud workloads.

- Technology Evaluation & Deployment : Evaluate and deploy network security technologies and tools to enhance security posture. Lead proof-of-concept initiatives, conduct market research, and collaborate with cross-functional teams including architecture, infrastructure, and application development to assess control alignments, integration requirements, and business fit before making investment recommendations.

- Security Policy & Standards Governance : Develop and enforce security policies, standards, and technical guidelines in alignment with regulatory requirements (PCI-DSS, SOC2, regional data protection regulations) and network security best practices. Ensure policy frameworks address emerging threats and remain practical for operational implementation across all network security technologies.

- Operational Maturity & Service Excellence : Develop operational models and drive maturity elevation across all network security technologies in alignment with industry frameworks (ITIL, NIST, ISO). Establish KPIs, operational metrics, and continuous improvement programs to achieve target maturity levels for detection, response, prevention, and recovery capabilities with documented operational runbooks and playbooks.

- ITSM Compliance & Audit Readiness : Ensure IT Service Management best practices are followed across all network security operations. Build and maintain audit-ready documentation including standard operating procedures, runbooks, change management protocols, incident response playbooks, and compliance evidence repositories that satisfy internal audit and regulatory examination requirements.

- Vendor Management & SLA Governance : Manage vendor relationships and contract governance for network security platforms. Define clear deliverables, establish achievable SLAs/OLAs with measurable success criteria, conduct quarterly business reviews, and maintain ongoing governance frameworks to ensure vendor accountability, performance optimization, and value realization.

- Team Leadership & Cross-Functional Collaboration : Manage and mentor the network security operations team across multiple geographies to support Follow-the-Sun operational models and 24/7 service delivery. Collaborate with Security Operations Center (SOC), application service owners, infrastructure teams, cloud platform teams, and business units to ensure seamless integration of network security controls, facilitate incident response coordination, and maintain effective communication channels for operational transparency.

- Threat Intelligence & Continuous Innovation : Stay current on emerging technologies, trends, and threats in network security including web application protection, API security, DDoS mitigation, network detection, zero-trust architectures, and secure access service edge (SASE) models. Translate threat intelligence into actionable security improvements, rule updates, detection signatures, and proactive defense measures to maintain a robust and adaptive security posture

Skills, experience, qualifications and knowledge required

- Bachelor's degree in Computer Science, Information Technology, or related field; Master's degree preferred.

- Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification is required.

- 5-8 of years of experience in information security, with a focus on network security

- Proven experience in designing and implementing network security solutions in an enterprise environment (WAF, DDoS, IDS/IPS, Proxy)

- Strong knowledge of security technologies on security network protocols, and frameworks, such as ISO 27001, NIST, and OWASP.

- Familiar with network segmentation strategies to limit the spread of security incidents and improve the overall security posture of our network.

- Familiar with implementing network security controls for cloud

- Excellent analytical, problem-solving, and project management skills.

- Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders.

Personal Characteristics:

- Strong communication skills, ability to work comfortably with different regions

- Good team player, ability to work on a local, regional and global basis and as part of joint cross location initiative.

- Strong analytical and problem-solving abilities

- Ability to work independently and as strong team player in global team

- Ability to run with multiple tasks concurrently and manage expectations appropriately .