Jobs at SISA Information Security Pvt Ltd

Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.

Conduct regulatory compliance audits for financial-sector clients by interpreting Indian regulatory requirements, translating them into control frameworks, performing risk assessments and evidence reviews, identifying gaps, preparing audit reports, tracking remediation, and supporting regulatory queries. The role engages senior stakeholders, compliance teams, IT personnel, and regulators while managing audit timelines and deliverables.

Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.

Plan and execute PCI DSS audits, conduct risk assessments and gap analyses, gather compliance evidence, identify remediation needs, prepare reports, coordinate with QSAs, maintain documentation, monitor regulatory changes, train teams, and track findings through closure.

Lead cybersecurity GRC and compliance engagements from scoping through final reporting. Perform control assessments, framework mappings, evidence validation, gap and risk assessments, remediation advisory, audit workpaper development, and executive reporting across CMMC, FedRAMP, NIST, ISO 27001, SOC 2, and HITRUST. Advise clients, coordinate with auditors and assessors, manage multiple engagements, and contribute to GRC methodologies, templates, control libraries, and presales activities.