CAREERS

We are looking for an outstanding Web Developer to be responsible for the coding, innovative design and layout of our website. Web developer responsibilities include building our website from concept all the way to completion from the bottom up, fashioning everything from the home page to site layout and function.

Essential Skills

• In depth knowledge and Experience of UI development
• In depth knowledge of HTML5, CSS3, SCSS, JavaScript Concepts
• Understanding of the Responsive Design/Development

Roles and Responsibilities :

• Understand the data model / design and develop the code as per the functional requirements.
• Providing the development estimates
• Able to understand design aspects & mentor junior/new team members
• Should be able to write code in one or more programming or scripting languages.
• Designing the architecture of the components, technologies and languages of an application
• Testing sites and applications in different browsers and environments
• Learning and testing new technologies, frameworks and languages

Experience and Qualifications:

• Strong JavaScript & Advanced JavaScript experience with a minimum of 1 years experience
• Knowledge of JavaScript Design Patterns
• Strong knowledge of relational databases, tools and PHP skills.
• Expertise in front-end technologies (HTML, JavaScript, CSS), PHP frameworks, and MySQL databases.
• Write clean, well-designed code.
• Passion for best design and coding practices.
• Knowledge of various design patterns.
• write code in one or more programming or scripting languages, such as PHP or JavaScript
• fix bugs in existing projects

Educational Background :

• UG :Any Graduate
• PG :Any Postgraduate

Location: In Delhi, NCR.

We are looking for an all-around digital marketing team player who has a wide range of experience across the digital marketing landscape. The Digital Marketing Associate will be responsible for producing, executing, and analyzing digital engagement strategies. We're looking for someone who understands extensively how to use various tools and channels such as web analytics, search engine optimization, email marketing, and social media to contribute to our overall marketing goals: increased brand awareness, brand trust, and sales leads from digital sources.

Roles and Responsibilities:

• Writing copy for digital platforms (blog writing, social media content, website copy, email marketing campaigns, brochures)
• Creating paid campaigns on different social media handles for ongoing activities.
• Contributing to digital marketing campaign ideas and execution
• Writing ad copy
• Employ marketing analytics techniques to gather important data (social media, web analytics, rankings, etc.)
• Tracking and reporting on SEO performance and SERP rankings
• Develop and implement link building strategy
• Work on ON Page SEO Techniques
• Implement OFF Page SEO Techniques i.e. ( Guest Blogging, Profile Creation, etc )
• Research and Implement SEO recommendations
• Recommend changes to website architecture, content, linking, and other factors to improve SEO positions for target keywords.
• Google Analytics and Search Console Analysis

Experience and Qualifications:

• At least 2 years of working experience in digital marketing
• Demonstrated experience and success in growing audiences across social media platforms (Facebook, Instagram, LinkedIn)
• Solid knowledge of Google Ads, Analytics (experience in Data Studio a plus)
• In-depth knowledge of SEO (technical and non-technical)
• Up-to-date on digital marketing trends, latest best practice
• Extensive knowledge and experience in SEMrush
• Skilled writer (for various platforms and purposes)
• Experience and proven success in content marketing projects (ranking for specified keywords etc.)
• Knowledge of basic UX principles and latest best practices
• Working knowledge and proficiency in designing a plus (Adobe suite or Canva)
• Video editing skills and experience desirable
• Ability to prioritize, work well under pressure, handle multiple tasks simultaneously and meet deadlines
• Have a positive attitude and sound judgment
• Top communication skills, both written and verbally

Educational Background :

• UG :Any Graduate
• PG :Any Postgraduate
• Proficient communication skills
• Eager to learn new things
• Must have Knowledge of MS Office applications i.e. Word, Excel, PPT, etc.
• Up-to-date with the latest trends and best practices in SEO and SEM
• Digital Marketing Certification (Preferred)

Location: In Delhi, NCR.

Looking for young and talented Content Writers with excellent English language skills who can create and write articles, blogs, descriptions, and web articles related to IT Services / Cyber security / Networking Security etc and thus helps in expanding its digital footprint to drive more values through online content. The candidate must have good command over written English and possess excellent research skills.

Essential Skills

• Impeccable spelling and grammar.
• High level of creativity as well as ability to use data-driven insights to write better material
• An understanding of formatting articles on the web.
• Bachelor's degree in English, communications, or related field (Master's degree, a plus).
• Excellent writing skills in English, with the ability to communicate and collaborate effectively.
• Freshers with excellent written communication skills are also welcome.
• Experience in teaching and content development.

Roles and Responsibilities :

• Proofread and edit blog posts before publication.
• Coordinate with design teams to illustrate articles
• Conduct simple keyword research and use SEO guidelines to increase web traffic.
• Update website content as needed.
• Conduct thorough research on companies and write unique short descriptions.
• Research online and create industry-related topics content as per the Category, style, tone, and requirements.
• Filter information into clear, concise text and present content in the most engaging manner.
• Develop grammatically correct and quality content.
• To maintain 100% accuracy standard and create unique plagiarism free content.

Educational Background :

• UG :Any Graduate
• PG :Any Postgraduate

Location: In Delhi, NCR.

Roles and Responsibilities :

• Work creatively to produce original and aesthetically pleasing designs and solution
• Tell a story through short and impactful videos (editing of existing footage and creating new vector-based videos/animations)
• Keep abreast of the latest trends in terms of video content and design on social media
• Sort through music that supports the story
• Create images and videos that identify a product or convey a message
• Develop graphics for product illustrations, logos, and websites
• Select colors, images, text style, and layout
• Review designs for errors before printing or publishing them
• Develop engaging, creative, innovative content for regularly scheduled posts, which enlighten audiences and promote brand-focused messages

Experience and Qualifications:

• Minimum work experience in a relevant role (animator/video editor) of 2 to 4 years
• Proven work experience as a Video Editor/Animator
• Solid experience with digital technology and editing software packages
• Demonstrable video editing ability with a strong portfolio
• Thorough knowledge of timing, motivation, and continuity
• Knowledge of special effects, 3D, and compositing
• Creative mind and storytelling skills

Educational Background :

• UG :Any Graduate
• PG :Any Postgraduate

Location: In Delhi, NCR.

Location : Delhi, NCR.

Experience :

1 to 2 years developing and implementing data analytics methodologies with good interpersonal with excellent communication skills

Technical Skills Required :

• Python, Machine learning, Deep Learning, Data wrangling, Integration with Big Data Hadoop, Scoop, Impala, Hive, Pig & Spark R with Statistics, Data Wrangling, Models, Data mining, and Algorithms. Time series and forecasting, SQL, queries, Tableau Data Visualization.
• Good Understanding with Hadoop, HBase, Hive, Pig, and Mapreduce, Python, R, Java, Apache spark, Impala, Hive, Pig, Machine Learning, Algorithms, Time series and forecasting, SQL, queries, Tableau Data Visualization.
• Develop BigData/ Hadoop Technologies training content for Students, Working Professionals and Corporates.
• Conduct online and classroom training sessions by providing practical use cases and assignments.
• Design quality self-faced recorded training sessions on all latest BigData/ Hadoop development technologies for students, working professionals and corporates.
• Continuously improve on teaching methodology to suite online model to lead to high student.
• Work in small teams where each team member has a lot of ownership and each individual can make a big impact.
• Design and make the trainees develop mini or major real time projects for practical exposure.
• Work as a consultant or architect in development and training of real time BigData/ Hadoop Applications for corporates on part time or fulltime basis.

Hands on Knowledge on Tools :

• Anaconda Navigator
• Jupyter Notebook
• Hadoop
• Hive
• Pig
• Mapreduce
• Mapreduce
• Apache
• Spark
• Impala
• SQL
• Tableau

Location : At our client side in Delhi, NCR.

Educational Background : Graduate (B.E, B.Sc)

Certifications : CEH Certification, OSCP, SANS GWAPT, SANS GPEN

Experience : Experience of 1-2 years

Operational Roles and Responsibilities :

• Conduct Vulnerability Assessments, Penetration Testing, Device Hardening, Application Security
• Assessments, Log Review, Review of Documents, Network Monitoring and Reporting
• Conduct and compile findings on new vulnerabilities, new tools for departmental use
• Create project deliverables /reports and assist the immediate supervisor during submissions and client discussions
• Abide by the project time lines and maintain project discipline

Technical Skills Required :

• Extensive Working knowledge of Operating systems : Windows and variants, Unix and variants, Linux and variants.
• Knowledge about Computer Networks, System Security, Firewalls, IDS, IPS and Vulnerabilities.
• Well versed in the use of Ethical Hacking/Network Scanning tools such as Nipper ,Nmap, Amap, Nessus-OpenVAS, SAINT, Metasploit, Accunetix Web Application Scanner amongst others
• One or more scripting language like perl/php/python/bash OR one or more Programming Languages like Python/C/C++/Java.

Other Working Skills :

• Analytical skills, ability to work with minimal supervision, good speaking and writing skills, excellent working knowledge of word, excel and powerpoint

Location : Delhi, NCR

Educational Background : Graduate or Postgraduate (B.E, B. Tech, ME M.Tech) in Information Security

Experience : 2-5 years or more

Operational Roles and Responsibilities :

• Executes application and network penetration tests that will vary in level of complexity from simple to potentially complex using tools and manual methods.
• Develops detailed work plans, schedules, resource plans for recurring penetration tests summarize findings and recommended corrective measures.
• Advises leadership of the technical and business risks of identified vulnerabilities Liases with external 3rd party pen testers as required
• Establishes and reports on metrics to gauge pen testing effectiveness, progress and key risk areas identified through audits.
• Identifies risks and escalates potential project issues to management as required
• Implement changes to procedures and systems to enhance data systems security
• Recommends process improvement strategies
• Provide the highest level of technical expertise and support to management and staff members in risk assessments and the implementation of appropriate data security procedures and products
• Identify and determine causes of security violations, and recommend corrective actions to ensure data security

Other Working Skills :

• The ability to directly and successfully lead a high-performing team through complex people and technology change.
• Solid knowledge of software development methodologies and best practices.Proficiency in at least one modern compiled programming language such as C, C++, C#, or Java.
• Knowledge of professional software engineering best practices for the full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations.
• Good understanding of XML, XML schema, and related technology; JavaScript and HTML knowledge.

Location : Delhi, NCR

Educational Background: B.E, B. Tech, B.SC in Information Security, CSC, ECE, IT

Certifications :

• CEH Certification, CHFI Certification, ECSA Certification, LPT Certification
• Offensive Security Certified Professional certification (OSCP)
• Offensive Security Certified Expert (OSCE)
• Offensive Security Exploitation Expert (OSEE)
• Offensive Security Web Expert (OSWE)

Experience : 2 year or more

Operational Roles and Responsibilities :

The individual as a part of Information Security operaton team shall be responsible to provide critical management and reporting services on a variety of Information Security platforms. This includes: configuration, tool creation (scripts, procedures, and templates), defining reports, and recommending best practices and procedures.

• Hands-on performing the security operational activities.
• Developing procedures, methods, reports, and scripts to facilitate the monitoring and measurement of enterprise
• Wide IT Security Solutions
• Pro-active follow up on potential security risks and incidents
• Configuring and monitoring of security infrastructure
• Vulnerability scanning and reporting
• Monitoring of various log sources and identifying risks and issues
• Creating event log dashboards, reports and alerts
• Contributing to the overall IT security architecture

Hands on knowledge on Tools: Nmap, Kali Linux, Metasploit, Armitage , Maltego, Burp, Paros Proxy Nessus, nexpose, wireshark, sqlmap etc

Location : Delhi, NCR

Educational Background: B.E, B. Tech, B.SC in Information Security, CSC, ECE, IT

Experience: 2 year or more

Operational Roles and Responsibilities :

Performing Network Security Assessment, Network Security Architecture Review (NSAR), Network Device Configuration Audit, Security Policy drafting and review, Network Vulnerability Assessment / Penetration Testing and System Hardening.

Web application security analysis, Vulnerability assessment and penetration testing

Technical Skills Required :

• Hands-on experience in configuring, managing and reviewing configuration of network devices such as firewalls, routers etc. and should have exposures to network related vulnerabilities and risks.
• Web application security testing (Manual and Automated) based on standards such as OWASP, CWE and NIST is preferred.
• Knowledge of Vulnerability Assessment and Penetration Testing for Infrastructure & Applications
• Understanding of security issues, exploitation techniques and remediation measures and ability to implement new attack approaches/vectors
• Should have exposure to some or more of the security assessment tools such as fortify ,WebInspect,Proxy tools, IBM Appscan,nmap ,nessus,maltego,Acunetix and Backtrack.
• Knowledge of Wireless networks and Penetration Testing.
• In depth knowledge of Networks and Operating Systems.

Location : Delhi, NCR

Educational Background: MCA, BCA , B.Tech ( CSC or ECE)

Certifications : CEH/CSSLP/CISSP

Experience : 3-6 years

Operational Roles and Responsibilities :

Sound Knowledge in conducting Network/ Infrastructure Vulnerability Assessment and Penetration Testing, Application security testing, Wireless security testing, Code review with at least 2 year experience in information security.

Technical Skills Required :

• Good knowledge on the Java, .Net based web technologies.
• Should posses sound understanding in information security fundamentals, systems security and controls such as Vulnerability Assessment and Penetration Testing for Infrastructure / network / web application / databases and Secure Code Review.
• Proven experience of penetration testing for web based application and use of backtrack based tools and other open source / commercial tools.
• Excellent project, time management and prioritization skills
• Interaction with multi-disciplinary teams for timely meeting of key project milestones and checkpoints
• Should posses sound knowledge of hardening, patch management, VA/PT and configuration review.
• Contribute to practice development by creating reusable components and document key project-learning within the consulting practice

Location : at Codec Networks Client side at New Delhi.

Educational Background : raduate (B.E, B. Tech, MSc, B.Sc) in CSC, ECE, IT

Certifications :

Experience : Experience 2 years or more

Operational Roles and Responsibilities :

• Conduct Vulnerability Assessments, Penetration Testing, Device Hardening, Application Security Assessments, Log Review, Review of Documents, Network Monitoring and Reporting
• Conduct and compile findings on new vulnerabilities, new tools for departmental use
• Create project deliverables /reports and assist the immediate supervisor during submissions and client discussions
• Abide by the project time lines and maintain project discipline

Technical Skills Required :

• Hands-on Experience is performing Network Security Assessment and vulnerability Assessment.
• Well familiar with basics of TCP/IP and Networking principles.
• Good understanding of OWASP top 10 and web Application security audits.
• Manual Penetration Testing skills and techniques are required besides automated tools and frameworks.
• Familiar working with Publicly available exploits codes.

Hands on knowledge on Tools : Nmap, Kali Linux, Metasploit, Armitage , Maltego, Burp, Paros Proxy Nessus, nexpose, wireshark, sqlmap etc.

Location : Delhi, NCR.

Educational Background : MCA, BCA , B.Tech ( CSC or ECE)

Certifications :

Experience : Experience of 2-3 years

Operational Roles and Responsibilities :

• C/C++/Java , Dot Net and Java knowledge / experience. One or more Scripting Language like perl/php/python/bash
• Expertise in web application penetration testing and network penetration testing
• Good knowledge of hardening guidelines for database, server, firewall etc.
• Good knowledge of secure software development standards, process, techniques and tools
• Good knowledge of security technologies for secure software development such as cryptography, authentication techniques and protocols etc.
• Good understanding of security development lifecycle processes across technologies.

Other Working Skills :

Analytical skills, ability to work with minimal supervision, good speaking and writing skills, excellent working knowledge of word, excel and powerpoint

Location : New Delhi

Certifications :

Experience : 3-8 years

Operational Roles and Responsibilities :

• Must have extensive experience in conducting security testing on USSD, IVR platform and SIM card testing with telecom operators.
• Must have extensive experience in performing security tests of mobile application Android, iOS, Symbian, Blackberry for telecom operators.
• Must have extensive experience in conducting security tests on Mobile payment system covering mobile application, middleware system and CRM modules.
• Must have extensive experience in conducting source code review in Java, J2EE, Android, iOS and BB platforms
• Must have experience in conducting security test of telecom devices like Femto cell.
• Must have experience in conducting security tests of latest solutions like Adhaar based authentication solutions, location based services solution, etc

Other Working Skills :

• Excellent report-writing skills.
• Ability to communicate technical impact and business risk to a non-technical audience after the project
• Outstanding customer relationship management skills
• Deep knowledge of databases and popular web applications

Location : Delhi, NCR.

Educational Background: MCA, BCA , B.Tech ( CSC or ECE)

Certifications : Industry recognized Application Security Certifications, such as CISSP, CISA, CEH ISO 27001 are a plus.

Experience :1-3 Years of experience in web application /Mobile Application Development.

Technical Skills Required :

• Requires good level of knowledge and understanding of architecture, applications systems design and integration with a detailed understanding of applicable programming methodologies.
• Must have an accomplished level of hands-on development experience with either Java/J2EE or .NET/PHP Android etc with demonstrated competencies in secure coding techniques.
• Hands on of the various mobile platforms iOS, Android, Blackberry, Symbian and Windows mobile.

Location :Delhi, NCR.

Job Role : Security Consultant/Penetration Tester required with expert skills in Web Application and Mobile Application security assessments

Full Job Description :

Senior Penetration Tester/Ethical Hacker to work as a Web Application/Mobile Application Security Consultant in a challenging environment.

Experiance : 2-3 years experience in web application and mobile security

Operational Roles and Responsibilities :

• Perform manual internal and external penetration testing.
• Ability to communicate technical impact and business risk to a non-technical audience after the project
• Perform mobile application assessments on Android, iOS, BlackBerry and Windows Phone applications Utilize scanning tools when necessary.
• Complete project work accurately and within deadlines as required.
• Complete analysis and draw comprehensive conclusions, making appropriate recommendations.
• Be a part of team handling various challenging projects and assist on ongoing research in the company

Technical Skills Required :

• Advanced manual penetration testing and application testing experience.
• Advanced experience in social engineering techniques and tactics.
• Advanced experience with tools such as Nmap, Burp Suite, Nessus and Metasploit.

Other Working Skills :

• Excellent interpersonal, communication, and organizational skills.
• Ability to think outside the box to solve highly technical problems and ability to think like an attacker.
• Ability to work effectively with clients, management, staff members, vendors, and consultants.

Location :Delhi, NCR.

Educational Background: MCA, BCA , B.Tech ( CSC or ECE)

Certifications : CEH/CSSLP/CISSP

Experience : 3-6 Years

Operational Roles and Responsibilities :

• Conduct Security Code Review, Penetration Testing and Consult Product Development Team to secure Financial and Telecom Applications
• Conduct penetration testing for thin & thick client based applications
• Identify and propose work-around for critical defects.
• Should be able to deal with multiple platforms like Windows, Linux and technologies like Java, .Net
• Conduct Threat Modeling of Applications
• Ability to analyze root causes and deliver strategic recommendations during security reviews
• Being a key team member for delivering complete project life cycles - from capturing Customer requirements to delivering timely solutions to Customers
• Adhering to best practices, and alignment with the Customer´s security requirements for project execution, documentation, and reporting
• Interaction with multi-disciplinary teams for timely meeting of key project milestones and checkpoints
• Manage Customer relationships at the project delivery level

Technical Skills Required :

• Java, .Net, PHP based web technologies
• Rich script development in Perl/Ruby/Php/Python will be an advantage
• Should be familiar with OWASP, OSSTMM etc.
• Hands on Experience on tools like Fortify, IBM AppScan etc.
• Proven experience of security code review and penetration testing Java and .Net Technologies

Location : Delhi, NCR

Educational Background : B.E, B. Tech, B.SC in Information Security, CSC, ECE, IT

Experience : 2 years or more

Operational Roles and Responsibilities :

The individual as a part of Information Security operaton team shall be responsible to provide critical management and reporting services on a variety of Information Security platforms. This includes: configuration, tool creation (scripts, procedures, and templates), defining reports, and recommending best practices and procedures.

• Hands-on performing the security operational activities.
• Developing procedures, methods, reports, and scripts to facilitate the monitoring and measurement of enterprise wide IT security solutions
• Pro-active follow up on potential security risks and incidents
• Configuring and monitoring of security infrastructure
• Vulnerability scanning and reporting
• Monitoring of various log sources and identifying risks and issues
• Creating event log dashboards, reports and alerts
• Contributing to the overall IT security architecture

Technical Skills Required :

A technically savvy individual who can work independently in shifts (24*5) operations and in a small team environment.

Passionate about IT systems and information security

A strong knowledge and background in

Intrusion detection systems, Security incident / event management systems, Firewall rule base management tools, Firewall rule base audit tools, Anti-virus or anti - malware technologies, Log analysis software, Internet proxy servers, Compliance archival solutions, Various operating systems (e.g. Windows and Linux), Basic scripting capabilities are an advantage, Possess a high level overview of risk-intelligence and security awareness, End point security, Encryption technology, Database Security.

Other Working Skills :

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

5 years' experience working in IT/InfoSec engineering and operations

Technical Skills Required :

• Demonstrated experience with deploying and operating network security tools, including but not limited to IDS, firewalls, proxies and security gateways;
• Demonstrated experience supporting and managing Linux operating systems;
• Advanced level knowledge of TCP/IP networking concepts and protocols, advanced technical knowledge of network security;
• Good level knowledge of key network services and technologies and most common application protocols such as DNS, IPsec, HTTP/HTTPS;
• Demonstrated experience with conducting threat and vulnerability management work program, including threat analysis, vulnerability scanning and remediation;
• Demonstrated ability to implement vulnerability mitigation at all levels of the OSI network model. Must be able to quantify the severity of discovered vulnerabilities and prioritize remediation efforts;
• Demonstrated experience using commercial vulnerability scanning tools. Ability to work with system and application owners to ensure remediation of discovered vulnerabilities and rectify any false positive conditions;
• Advanced knowledge of interpreted languages such as Perl, Python, PowerShell, or Bash in addition to compiled languages such as C++;
• Ability to work well under pressure and to meet tight deadlines. Demonstrates a high level of motivation, confidence, integrity and responsibility;

Soft Skills Expertise :

• Demonstrate excellent interpersonal skills; including the ability to work independently, effectively in a team/task force as a team member or leader, and with senior staff and managers;
• Demonstrated ability to listen and integrate ideas from diverse views, create partnerships and collaborate with others, advocate and influence, resolve conflicts constructively, and work effectively across boundaries even without active guidance from the management;
• Excellent communication skills both written and verbal include the capacity to communicate complex and technical issues in simple terms; Analytical skills required.

Role purpose: To support GRC engagements through structured evidence collection, control checklist preparation, documentation, audit working papers, data inventory support and first-level control testing under supervision.

1. Detailed Job Description

• Collect policies, procedures, screenshots, logs, registers, risk documents, training records, asset lists, access review evidence and vendor documents from customers.
• Prepare audit working papers and maintain evidence indexes for ISO, SOC 2, RBI, IRDAI, SEBI, CERT-In, DPDPA, GDPR and ITGC-related engagements.
• Perform first-level checklist testing against approved control checklists and document the implementation status as implemented, partially implemented, not implemented or not applicable.
• Support data inventory, data processing activity collection, privacy notice review, consent flow review and breach readiness checklist preparation.
• Assist in preparation of gap trackers, risk registers, management action plan trackers, policy registers and compliance matrices.
• Coordinate with client SPOCs for pending evidence and maintain follow-up logs, evidence receipt tracker and query register.
• Support senior consultants in control owner interviews by preparing meeting notes, evidence questions and MOMs.
• Ensure all evidence is named, stored, versioned and indexed according to Codec Networks evidence management rules.
• Support proposal and pre-sales teams by preparing framework checklists, sample deliverable lists and compliance references under guidance.
• Follow confidentiality, data protection, impartiality, ethics and documentation requirements for all customer engagements.

2. Technical Skill Sets Required

3. Supporting Certifications

4. Technical Experience Required, Including Practical Industrial Project

5. Target Deliverables at This Position

6. Personality and Leadership Attributes Required

7. KPIs and Performance Indicators

8. Interview / Evaluation Indicators

Role purpose: To independently execute GRC, regulatory, ISO/SOC 2 and privacy assessment tasks, evaluate evidence, identify gaps, draft observations, prepare risk-rated reports and coordinate customer remediation planning.

1. Detailed Job Description

• Conduct control testing and evidence review for ISO 27001, ISO 27701, ISO 22301, SOC 2, NIST CSF, PCI DSS, ITGC, DPDPA, GDPR and sectoral cybersecurity audit requirements.
• Perform gap assessments by comparing customer evidence, policies, procedures, screenshots, logs and interviews against defined control requirements.
• Draft audit observations with condition, criteria, risk, impact, root cause, recommendation, priority and management action plan.
• Prepare risk registers, compliance matrices, maturity scorecards, control implementation trackers and board-summary inputs.
• Review and improve policies, procedures and registers including ISMS policy, risk management, asset management, access control, incident management, supplier security, BCP/DR, privacy and data protection documents.
• Support DPDPA/GDPR readiness by reviewing privacy notices, consent workflows, data principal rights processes, DPIA records, data retention and vendor privacy controls.
• Lead customer evidence walkthrough calls, clarify evidence expectations and challenge unsupported claims professionally.
• Support internal audit planning, audit sampling, audit trail creation and certification readiness support.
• Assist in pre-sales scoping by estimating effort based on number of locations, processes, applications, controls, vendors, employees, data flows and regulatory frameworks.
• Mentor L1 analysts and review their working papers before escalation to L3 or QA.

2. Technical Skill Sets Required

3. Supporting Certifications

4. Technical Experience Required, Including Practical Industrial Project

5. Target Deliverables at This Position

6. Personality and Leadership Attributes Required

7. KPIs and Performance Indicators

8. Interview / Evaluation Indicators

Role purpose: To lead GRC vertical engagements end-to-end, validate control conclusions, manage customer stakeholders, guide teams, own report quality and convert technical compliance observations into management-ready risk and improvement roadmaps.

1. Detailed Job Description

• Lead complete GRC, regulatory audit, ISO/SOC 2, cyber maturity and privacy engagements from kickoff to final report delivery.
• Design audit plans, sampling methodology, evidence request lists, interview schedules, control testing approach and reporting templates.
• Lead multi-framework assessments combining ISO 27001, SOC 2, NIST, DPDPA/GDPR, PCI DSS, ITGC and sectoral regulations.
• Validate audit observations, risk ratings, management action plans, maturity scores and compliance conclusions before final QA.
• Conduct senior management workshops, control owner interviews, risk discussions, privacy/data-flow workshops and closure meetings.
• Lead privacy assessments including DPIA review, data processing register design, consent/notice review, vendor privacy risk and breach readiness.
• Prepare board-level summaries, regulator-ready response matrices, certification readiness reports and maturity dashboards.
• Supervise L1 and L2 teams, allocate tasks, review working papers, mentor consultants and manage workload quality.
• Support pre-sales with technical scoping, delivery approach, RFP response, methodology explanation, assumptions, exclusions and pricing inputs.
• Coordinate with VAPT, SOC, cloud, application security, TPRM and DFIR teams where GRC engagements require technical validation.

2. Technical Skill Sets Required

3. Supporting Certifications

4. Technical Experience Required, Including Practical Industrial Project

5. Target Deliverables at This Position

6. Personality and Leadership Attributes Required

7. KPIs and Performance Indicators

8. Interview / Evaluation Indicators

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Primary Duties: :

Excellent understanding of basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. Job involves reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detected.

Identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner. Expected to quickly assimilate new information of Client environments on a weekly or monthly basis on threat vectors to each environment and properly assess them.

Technical Skills Required :

• B.E / B.Tech / MBA in IT or equivalent, with 6+ years of experience in the field of IT Security and 3+ years of experience in Security Operations Center (SOC)
• Network penetration testing and manipulation of network infrastructure
• Mobile and/or web application assessments
• Email, phone, or physical social-engineering assessments
• Shell scripting or automation of simple tasks using Perl, Python, or Ruby
• Developing, extending, or modifying exploits, shellcode or exploit tools
• Developing applications in C#, ASP, .NET, ObjectiveC, Go, or Java (J2EE)
• Reverse engineering malware, data obfuscators, or ciphers
• Source code review for control flow and security flaws
• Mastery of Unix/Linux/Mac/Windows OS, including bash and Powershell
• Any of the following certifications would be preferred- OSCP / OSCE / CRTE

Key Responsibilities :

• Perform network penetration, web and mobile application testing, source code reviews, threat analysis, wireless network assessments, and social-engineering assessments
• Perform high quality web application pen tests while meeting project deadlines
• Validate security tool output, find vulnerabilities the tools can't, and create proof of concepts of various vulnerabilities to demonstrate them to stakeholders
• Research new tools and techniques to constantly improve the pen test process.
• Working with application developers to help them understand various vulnerabilities, the impact of the vulnerabilities, and high level recommendations on how to fix the vulnerability
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Recognize and safely utilize attacker tools, tactics, and procedures
• Develop scripts, tools, or methodologies to enhance Mendicant’s red teaming processes
• Assist with scoping prospective engagements, leading engagements from kick-off through remediation, and mentoring less experienced staff<

Other Skills :

• A skilled collaborator with experience in managing relationships through internal and external escalations along with experience in presenting to Client.
• Strong problem solving and troubleshooting skills
• Excellent Verbal and Written Communication Skills.
• Self-motivated and possessing a high sense of urgency and integrity.
• Demonstrates the ability to adapt to ever-changing schedules and work assignments including willingness to travel and work extended hours.

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Primary Duties: :

Excellent understanding of basic concepts such as networking, applications, and operating system functionality and be able to learn advanced concepts such as application manipulation, exploit development, and stealthy operations. Job involves reverse engineering an application and encryption method in order to gain access to sensitive data, all without being detected.

Identify and exploit misconfigurations in network infrastructure, parse various types of output data, present relevant data in a digestible manner. Expected to quickly assimilate new information of Client environments on a weekly or monthly basis on threat vectors to each environment and properly assess them.

Technical Skills Required :

• B.E / B.Tech / MBA in IT or equivalent, with 8+ years of experience in the field of IT Security
• Have 3+ years of work experience in an operations or research manager capacity
• Effectively manage complex strategic projects and operations from start to finish
• Be proactive and organized
• Have a knack for figuring out how new software systems work
• Be familiar with Stata, R, and Python or tools like GitHub
• Reverse engineering malware, data obfuscators, or ciphers
• Source code review for control flow and security flaws
• Mastery of Unix/Linux/Mac/Windows OS, including bash and Powershell
• Any of the following certifications would be preferred- OSCP / OSCE / CRTE

Key Responsibilities :

• Staffing RED Team members on projects
• Assigning RED team members to projects based on specialization and capacity
• Tracking members’ allocation and utilization
• Facilitate knowledge/information management across team
• Assist team with client development of high impact potential projects
• Tracking project publication status
• Validate security tool output, find vulnerabilities the tools can't, and create proof of concepts of various vulnerabilities to demonstrate them to stakeholders
• Research new tools and techniques to constantly improve the pen test process.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Recognize and safely utilize attacker tools, tactics, and procedures
• Assist with scoping prospective engagements, leading engagements from kickoff through remediation, and mentoring less experienced staff

Other Skills :

• A skilled collaborator with experience in managing relationships through internal and external escalations along with experience in presenting to Client.
• Strong problem solving and troubleshooting skills
• Excellent Verbal and Written Communication Skills.
• Self-motivated and possessing a high sense of urgency and integrity
• Have attention for detail, while being able to zoom out and understand the big picture
• Be excited to create and deploy high-impact internal systems
• Demonstrates the ability to adapt to ever-changing schedules and work assignments including willingness to travel and work extended hours.

Location : Noida

Experience :

1 to 2 years developing and implementing data analytics methodologies with good interpersonal with excellent communication skills

Technical Skills Required :

• BE/B.Tech/MCA with minimum 6-10 Plus years of experience in the field of IT Security
• CISSP, CISA and/or GCIA (GIAC Certified Intrusion Analyst)
• Architecture design experience and certifications with one or more SIEM/ Security solutions (i.e Splunk ES, Elastic ELK, HP ArcSight, IBM QRadar, LogRhythm)
• Strong problem solving and troubleshooting skills including the ability to perform root cause analysis for preventative investigation
• Familiarity with security analysis of critical system logs and network protocols such as network flow data and full packet capture technologies
• Strong written and verbal communication, as well as organizational and documentation skills, Self-motivated and possessing a high sense of urgency and integrity
• Demonstrates the ability to adapt to ever-changing schedules and work assignments including willingness to travel and work extended hour
• In-depth knowledge of technical approaches in security analytics, monitoring and alerting Maintains technical knowledge within areas of expertise

Key Responsibilities :

• Anaconda Navigator
• Administration of SIEM environment (eg: deployment of solution, user management, managing the licenses, upgrades and patch deployment, addition or deletion of log sources, configuration management, change management, report management, manage backup and recovery etc)
• Construction of SIEM content required to produce Content Outputs (e.g., filters, active lists, correlation rules, reports, report templates, queries, trends, variables)
• Integration of customized threat intelligence content feeds provided by the Threat Intelligence & Analytics service
• Assist during UAT of Content Items against performance criteria defined in the High-Level Use Case (HLUC) documentation.
• Perform modification of Content Items, including tuning of threshold and alert logic, so they meet requirements defined in the HLUC or for performance, functionality, or usability enhancements on Covered Systems.
• Identifies possible sensor improvements to prevent incidents
• Collects/updates threat intelligence feeds from various sources
• Creates situational awareness briefings
• Co-ordinates with the client for incident analysis, containment and remediation
• Liaise with Security monitoring team to discover repeatable process that lead to new content development
• Demonstrated ability to innovate new solutions and processes; incorporating new technologies when warranted
• Provides engineering analysis and architectural design of technical solutions
• Knowledge of networking protocols and technologies and network security
• Knowledge and experience with End-Point Security, SIEM, DLP, IRM, vulnerability assessment and patch management solutions
• Understanding of risk and vulnerability mitigation
• Participates in CAB reviews, represents as a technical SME in CSIRT meetings
• Delivers Team mentoring responsibilities to enhance skill level of L1 and L2 colleagues and foster a culture of information exchange within the team

Other Skills :

• Good communication, co-ordination and interaction skills
• Vendor Management and escalation handling with Vendors
• Project Management & Governance
• Self-motivated and possessing a high sense of urgency and integrity

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Key Responsibilities :

• Stronger Experience of using open-source tools and commercials tools such as but not limited to Burp Suite, Metasploit, Nessus, Acunetix, Checkmarx, Nexpose with operating systems Windows and Linux.
• Knowledge and hands-on experience with TCP/ IP and other network protocols including routers, switches, IDS, WFA, firewalls architecture and design, network architecture
• Monitoring and reporting solutions to proactively identify issues and mitigate risk.
• Strong experience in methodologies and approach for information security principles, including risk assessment and management, threat and vulnerability management
• Strong experience in incident response lifecycle, and identity, access management and compliances such as PCI DSS, ISO 27001.
• Self-motivated and able to work in an independent manner. Assist and train team members in the use of security tools, the preparation of security reports and the resolution of security issues.
• Experience in the IoT domain & SaaS platforms would be a good to have.
• Multitasking abilities are a must as you will be handling more than one project at a time.
• Proven work experience as a system security architect or information security architect Experience in building and maintaining security system
• Detailed technical knowledge of web, cloud and in premise application, database and operating system security
• Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems,log management, content filtering, etc.
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Thorough understanding of the latest security principles, techniques, and protocols
• Experience in using and developing scripts and/or tools that identify and resolve the vulnerabilities in the application architecture and code
• Experience in security standards and protocols of Middle ware, web services, service bus etc.

Technical Skills Required :

• BE/B.Tech/MCA with minimum 4-8 Plus years of experience in the field of IT Security
• Vulnerability Assessment Tools : HP Web inspect, Outpost 24,IBM Appscan, Burp suite, OWASP ZAP, Webscarab, CSRF tester and charles proxy.
• Infrastructure/Network Tools : Nessus, Nmap, Qualysguard, Retina, Wireshark
• Secure Code Review Tools : HP Fortify & Checkmark
• Protocols : Web/HTTP,Network, SNMP, TCP/IP
• Programming language : C, Java, SQL
• Operating Systems : Windows 2k8 or later, Linux 5.6 or later, HP-UX, Cloud OS - open stack,
• Other tools : Scuba(Database scanning), SSLDigger, SSLScan

Other Skills :

• Good communication, co-ordination and interaction skills
• Vendor Management and escalation handling with Vendors
• Project Management & Governance
• Self-motivated and possessing a high sense of urgency and integrity

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Primary Duties: :

First line of response for monitoring alerts and resolving incidents that are events triggered and escalate accordingly. (MONITORING).Review false positives and ensure the right alerts are being reviewed (MONITORING) Investigating and find the root cause of the these issues.

Technical Skills Required :

• 24x7 Active monitoring of Security events using SIEM (based on standard operating procedure)
• (INVESTIGATING)Intrusion Detection System (IDS) monitoring, incident response, computer security best practices, system hardening, vulnerability assessment, and vulnerability management.
• (MONITORING) SIEM - Utilize logging tool for monitoring, correlating, analyzing security events. (OPERATIONS) Analyze, and triage remediation of threats detected across all endpoints including malware (OPERATIONS)
• Antivirus Management.
• DLP Event monitoring and management
• Handling End Users requests on Content Filtering using Websense for blocking and unblocking URL.
• Performing Data classifications using Seclore based on the Standard operating procedur
• Handling End Users requests on CyberArk based on standard operating procedure.
• Security Event Identification, Analysis, Mitigation and notifications.
• Handling End Users requests on encryption using Symantec PGP based on standard operating procedure
• Performance, health, and latency monitoring of Security devices.
• Defining new and tuning existing Security Controls (Correlation Rules) on SIEM for actionable alerts.
• Recommendation on tuning security Incident Management process and procedure
• Executive Security Dashboard for Clients Leadership Team.
• Coordination with Clients team on incident escalations.
• Daily and Weekly Security status report to Clients Technical Team.
• Monthly Security Status report to Clients Leadership Team

Key Responsibilities :

• BE/B.Tech/MCA with minimum 4-8 Plus years of experience in the field of IT Security
• Experience with one or more SIEM/ Security solutions (i.e Splunk ES, Elastic ELK, HP ArcSight, IBM QRadar, LogRhythm)
• Familiarity with security analysis of critical system logs and network protocols such as network flow data and full packet capture technologies
• In-depth knowledge of technical approaches in security analytics, monitoring and alerting
• Maintains technical knowledge within areas of expertise

Other Skills :

• Good communication, co-ordination and interaction skills
• Vendor Management and escalation handling with Vendors
• Self-motivated and possessing a high sense of urgency and integrity

Location : Delhi, NCR.

Educational Background :

Bachelor's degree (or equivalent) preferred in Computer Science, Information Systems or related fields

Certifications :

Possession of industry certifications highly preferred including, but not limited to, Certified Information Systems Security Professional (CISSP) and SANS GIAC.

Experience :

1 years' experience working in IT/InfoSec engineering and operations

Primary Duties: :

The Cybersecurity SIEM Administrator will be responsible for administering the deployed SIEM service. This role is also responsible for identifying, analyzing, developing new or tuning & Refinement of the content or use cases.

Technical Skills Required :

• BE/B.Tech/MCA with minimum 6-10 Plus years of experience in the field of IT Security
• CISSP, CISA and/or GCIA (GIAC Certified Intrusion Analyst)
• Architecture design experience and certifications with one or more SIEM/ Security solutions (i.e Splunk ES, Elastic ELK, HP ArcSight, IBM QRadar, LogRhythm)
• Strong problem solving and troubleshooting skills including the ability to perform root cause analysis for preventative investigation
• Familiarity with security analysis of critical system logs and network protocols such as network flow data and full packet capture technologies
• Strong written and verbal communication, as well as organizational and documentation skills Self-motivated and possessing a high sense of urgency and integrity
• Demonstrates the ability to adapt to ever-changing schedules and work assignments including willingness to travel and work extended hour
• In-depth knowledge of technical approaches in security analytics, monitoring and alerting Maintains technical knowledge within areas of expertise

Key Responsibilities :

• Administration of SIEM environment (eg: deployment of solution, user management, managing the licenses, upgrades and patch deployment, addition or deletion of log sources, configuration management, change management, report management, manage backup and recovery etc)
• Construction of SIEM content required to produce Content Outputs (e.g., filters, active lists, correlation rules, reports, report templates, queries, trends, variables)
• Integration of customized threat intelligence content feeds provided by the Threat Intelligence & Analytics service
• Assist during UAT of Content Items against performance criteria defined in the High-Level Use Case (HLUC) documentation.
• Perform modification of Content Items, including tuning of threshold and alert logic, so they meet requirements defined in the HLUC or for performance, functionality, or usability enhancements on Covered Systems
• Identifies possible sensor improvements to prevent incidents
• Collects/updates threat intelligence feeds from various sources
• Creates situational awareness briefings
• Co-ordinates with the client for incident analysis, containment and remediation
• Liaise with Security monitoring team to discover repeatable process that lead to new content development
• Provides engineering analysis and architectural design of technical solutions
• Knowledge of networking protocols and technologies and network security
• Knowledge and experience with End-Point Security, SIEM, DLP, IRM, vulnerability assessment and patch management solutions
• Understanding of risk and vulnerability mitigation
• Participates in CAB reviews, represents as a technical SME in CSIRT meetings
• Delivers Team mentoring responsibilities to enhance skill level of L1 and L2 colleagues and foster a culture of information exchange within the team

Other Skills :

• Good communication, co-ordination and interaction skills
• Vendor Management and escalation handling with Vendors
• Project Management & Governance
• Self-motivated and possessing a high sense of urgency and integrity