Mgr Information Security Architecture
Why UKG:
At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do.
We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters-and so do you.
Job Summary
About the Role
Job Location: Noida
As a Proactive Security - Manager, you will be part of UKG's forward-thinking Global Security team, focused on continuously strengthening our security posture through innovation and collaboration. This global role is dedicated to proactive security as people manager role , identifying gaps before adversaries do-leveraging advanced techniques like breach and attack simulation, technical control validation , validate defenses , threat intelligence, and proactive detection strategies to stay ahead of evolving threats. Work cross-functionally to simulate, assess, and harden defenses, enabling secure-by-design principles across our enterprise.
We're not just defending-we're redefining what proactive security looks like in the HCM SaaS space. With your analytical mindset and collaborative spirit, you'll help us lead the way in building a security-first culture that protects our customers and empowers innovation.
Key Responsibilities
• Proactively Anticipate Threats - Conduct proactive threat hunting and analysis using threat intelligence, tactics, techniques and procedures (TTPs) as per MITRE ATT&CK framework. Also if needed collaborate with Threat Intel teams to emulate MITRE ATT&CK and threat actor behaviors relevant to the organization /business environment.
• Proactively validate Defenses and Technical Security Controls with Adversary-Informed Testing - Lead and execute Breach and Attack Simulations (BAS) end to end using industry-leading BAS platforms such as SafeBreach, Mandiant Security Validation , AttackIQ, Picus Security, or custom-built scripts to test control efficacy.
• Map defenses and detections to MITRE ATT&CK to uncover blind spots and improve control resiliency.
• Integrate BAS outcomes with EDR, SIEM, SOAR, Identity, Cloud layers and security telemetry to validate detection capabilities and security stack effectiveness.
• Analyze BAS results to identify control gaps and ensure timely mitigation or remediation via required tools.
• Proactive Remediation via Engineering and Hardening - Further, recommend control enhancements and help harden detection rules, prevention policies, response playbooks, and security configurations.
• Work Cross functionally and collaborate with teams including SOC, Identity & Access Management, Detection Engineering, Security Architecture, Infrastructure, and Application teams to validate technical controls and enhance detection and response capabilities against simulated threats and draft playbooks.
• Automate false positive reduction in BAS Tool and evolve detection logic based on real-world threat trends.
• Provide strategic input in secure architecture controls validation, completeness and incident response planning across cloud, on-prem, and hybrid infrastructure.
• Lead implementation and optimization of tools across endpoint, network, identity, and cloud security domains basis BAS or purple teaming outcomes.
• Drive BAS results remediation end to end for identified detection, prevention, and response control gaps.
• Proactive Security Metrics, Reporting & Communication- Define and track metrics/KPIs (for e.g. - % MITRE ATT&CK techniques validated, detection coverage improvements before and after, control drift remediation rate etc.) and prepare reports to track-attack surface coverage, control completeness, effectiveness, and detection gaps closed.
Want more jobs like this?
Get jobs in Noida, India delivered to your inbox every week.
• Stay current with emerging threats, vulnerabilities, and industry trends.
Required Skills & Qualifications
• Bachelor's degree in computer science, Information Security, or a related field.
• 8+ years of professional experience in cybersecurity, with a focus on:
o MITRE ATT&CK Framework and TTPs
o Security Operations Center (SOC)
o Threat Intelligence, Detection Engineering
o Breach and Attack Simulation (BAS) tools, Purple Teaming
o Endpoint Detection and Response (EDR)
o Security Information and Event Management (SIEM), SOAR
o Vulnerability Management
o Identity and Access Management (IAM)
o Information Security Architecture
• Experience with threat hunting, log analysis, alert tuning, and BAS tools.
• In depth knowledge of attack lifecycle, MITRE ATT&CK, cyber kill chain, and modern threat actors.
• Deep understanding of enterprise security architecture, including cloud (AWS/Azure/GCP) and hybrid environments.
• Proficiency with tools like Splunk, Sentinel, CrowdStrike, EDR/XDR platforms, Network NDR , Firewall , WAF and security APIs.
• Excellent verbal and written communication skills, stakeholder management skills with the ability to convey complex technical concepts to diverse audiences across.
• Share knowledge, mentor others, and help drive a culture of curiosity, technical depth, and continuous improvement.
• Strong scripting skills in Python, PowerShell, or Bash and Exposure to Agile, CI/CD, or IaC pipelines are a plus.
Preferred Certifications (Not Mandatory)
• CISSP (Certified Information Systems Security Professional)
• OSCP/OSCE/Red/Purple Team certifications
• GIAC, CCSP, or other relevant cybersecurity certifications
• Vendor-specific: Mandiant (MSV) Certified Professional, SafeBreach Certified, MITRE ATT&CK Defender credentials.
Why This Role is Different - What You'll Gain:
• Global Impact: Your work will directly harden defenses across a complex, distributed enterprise.
• Innovation Playground: You'll work with bleeding-edge BAS tools, detection frameworks, and automation platforms.
• Strategic Visibility: Your threat findings will shape executive decision-making and security investment.
• Trusted Seat at the Table: Be part of a high-credibility security team that advises architecture, engineering, and leadership.
About Us-
Ultimate Kronos Group (UKG) is an American Multinational Technology company with headquartered in United States.
At UKG, our purpose is people. Formed by three leaders in HR solutions, UKG combines the strength and innovation of Ultimate Software, Kronos and PeopleDoc. Our love for all things HR, workforce management and HR service delivery is matched only by our people-centered culture. The merger of Kronos and Ultimate creates one of the world's largest cloud companies with 15,000 employees worldwide and approximately $4.5+ billion in revenue to deliver enhanced scale and an even stronger position in the HCM marketplace with highly complementary products and a combined 70 years of expertise. Jennifer Morgan, chief executive officer, is the chief executive officer and chairman of the new company, guiding an experienced executive team comprised of leaders from both Kronos and Ultimate. For more details, visit- www.ukg.in
Company Overview:
UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry - because great organizations know their workforce is their competitive edge. Learn more at ukg.com.
UKG is proud to be an equal opportunity employer and is committed to promoting diversity and inclusion in the workplace, including the recruitment process.
Disability Accommodation in the Application and Interview Process
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com
Perks and Benefits
Health and Wellness
- Health Insurance
- Health Reimbursement Account
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- FSA
- FSA With Employer Contribution
- HSA
- HSA With Employer Contribution
- Fitness Subsidies
- On-Site Gym
- Virtual Fitness Classes
Parental Benefits
- Birth Parent or Maternity Leave
- Non-Birth Parent or Paternity Leave
- Adoption Assistance Program
- Family Support Resources
- Adoption Leave
Work Flexibility
- Flexible Work Hours
- Remote Work Opportunities
- Hybrid Work Opportunities
Office Life and Perks
- Casual Dress
- Happy Hours
- Company Outings
- Holiday Events
Vacation and Time Off
- Paid Vacation
- Unlimited Paid Time Off
- Paid Holidays
- Personal/Sick Days
- Volunteer Time Off
Financial and Retirement
- 401(K) With Company Matching
- Company Equity
- Performance Bonus
- Profit Sharing
Professional Development
- Tuition Reimbursement
- Mentor Program
- Shadowing Opportunities
- Access to Online Courses
- Internship Program
Diversity and Inclusion