Teams at SISA Information Security Pvt Ltd

Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.

Conduct regulatory compliance audits for financial-sector clients by interpreting Indian regulatory requirements, translating them into control frameworks, performing risk assessments and evidence reviews, identifying gaps, preparing audit reports, tracking remediation, and supporting regulatory queries. The role engages senior stakeholders, compliance teams, IT personnel, and regulators while managing audit timelines and deliverables.

Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.