ISECURION

Job Title: Business Development Manager Location: Bengaluru Type: Full Time Joining Time: 30 days Company Description: ISECURION is a Cert-In Empaneled and ISO 27001:2022 Certified Cyber Security consulting company based in Mumbai and Bengaluru. We offer innovative and research-driven Cyber Security services to our clients. Our business-oriented approach helps us cater to our client&aposs security requirements based on their specific business types and processes. Are you a seasoned sales professional with a passion for cybersecurity Join our team in Mumbai and Bengaluru and play a crucial role in driving the success of our Cyber Security Solutions. Key Responsibilities: Prospect and develop account lead and sales plans. Manage the sales process from prospecting to pipeline management to negotiating final agreements. Identify, qualify, and develop growth opportunities with new and existing clients. Expertly present our Cyber Security Solutions and articulate its value proposition. Build and nurture effective relationships with strategic C-level IT leaders (CISO, CTO, Manager IT, VP IT, CIO, etc.). Demonstrate an understanding of the sales revenue cycle and buying behavior. Meet quarterly and annual sales targets. Develop a portfolio of business and manage individual revenue and performance goals. Building relationships with customers and business leaders. Developing sales strategies. Overseeing sales and business development. Working with the customer success team. Addressing technical challenges during sales. Maintaining knowledge of products and services. Supporting the closure of sales. * Required Experience: A strong track record of 4+ years in selling high-ticket value-based Cyber Security consulting, with expertise in strategic selling for services such as VAPT, WAPT, ISMS, Managed information Security Services, and Cloud Security Consulting. Experience working with senior-level decision-makers (CEO, CIO, CISO, and IT Managers) within key verticals, including BFSI, FinTech&aposs, E-Commerce, IT-ITES, etc. Understanding of the buying process cycle of customers. Proven track record of consistently high performance and achievement of new business acquisition targets. Strong skills in closing new sales deals. Ideal Candidate: Bachelors degree/MBA in Sales & Marketing. Experience in cyber security consulting companies Excellent written and verbal communication skills. Ability to multitask, organize, and prioritize work. Excellent presentation skills. Positive attitude when approaching adversity. Benefits: Flat Hierarchy. Young Progressive Team. Open Work Culture. Managed Career Paths. Mentoring. Industry Computer and Network Security Show more Show less

Job Title: Penetration Tester Location: Thane Experience: 5+ Years Department: Information Security Department Company Description: ISECURION is a leading cybersecurity services provider, ISO 27001:2022 certified and CERT-IN empanelled. We offer innovative solutions and cutting- edge research to address the evolving threats in the cyber landscape. We work with a diverse clientele, both global and Indian, to safeguard their digital assets, deliver strategic security consulting, and enhance their cyber resilience. Are You Passionate About Cybersecurity? Job Summary: We are seeking a highly skilled and creative Penetration Tester with over 5 years of experience to join our Offensive Security team. The successful candidate will have deep expertise in identifying vulnerabilities in enterprise infrastructure , web applications , Active Directory environments , and cloud platforms (AWS, Azure, GCP) — all without prior internal knowledge of the systems being tested. This role demands a think-outside-the-box mindset , capable of discovering novel attack vectors that others overlook, with a strong focus on making meaningful, measurable impacts on organizational security . Key Responsibilities: Perform comprehensive black box penetration testing of: Enterprise networks and internal infrastructure Web and mobile applications Active Directory environments (Kerberos, LDAP, domain trusts, etc.) Cloud platforms including AWS , Azure , and GCP Identify and exploit misconfigurations, logic flaws, privilege escalations, and other high-impact vulnerabilities. Simulate real-world attack scenarios such as credential attacks , lateral movement , and privilege escalation in AD/cloud hybrid environments. Document detailed technical findings, risk ratings, proof-of-concept exploits, and remediation strategies. Collaborate with internal teams to validate fixes and ensure secure configuration post-remediation. Stay up to date with threat actor tactics, techniques, and procedures (TTPs). Contribute to internal tooling, red team exercises, and security testing methodologies. Mentor junior team members and assist in strategic planning of offensive security initiatives. Required Skills and Qualifications: 5+ years of proven experience in black box penetration testing . Strong expertise in Active Directory testing, including attack paths, domain privilege escalation, and lateral movement. Experience in cloud security testing across AWS, Azure, and GCP environments (IAM roles, misconfigured services, metadata exploitation, etc.). Solid understanding of network protocols , web application security , OWASP Top 10 , and API exploitation . Proficiency with tools such as Burp Suite , Nmap , Impacket , BloodHound , Mimikatz , Metasploit , and PowerView etc . Scripting ability in Python, PowerShell, or Bash for exploit development and automation. Strong analytical and creative problem-solving skills. Excellent report writing and verbal communication abilities. Preferred Certifications (Good to Have): OSCP / OSEP / CRTP / CRTE / OSED / OSWE / GPEN / AZ-500 / AWS Security Specialty Microsoft or cloud-specific red team certifications are a plus What We’re Looking For: A strategic attacker’s mindset who can go beyond surface-level vulnerabilities. A technical leader who can assess modern hybrid infrastructures with precision. A contributor who can deliver real-world risk insights , not just findings. How to Apply: Interested candidates should submit their resume and a cover letter to hr@isecurion.com .

Desired Qualification + Experience: - Bachelor's or master's degree in information technology, Computer Science, Software Engineering or any other related engineering discipline or equivalent education and experience. 2-4 Years of Experience in IT and at least 1 year of handling Information Security Audits and governance for a large organization. Professional certifications preferred (ISO 27001 LA.) Location: - Bengaluru (On-site) Notice Period: - Immediate Industry Type Exposure: - Core Skills: - ISO 27001 Implementation and one Full Cycle audit, GRC, Internal Audit & Compliance Preferred Industry vertical: Information Technology, BFSI, Fintech, Start-up's , Manufacturing, E-Commerce, etc. Roles & Responsibilities: - The Information Security Lead Auditor will play a pivotal role in executing the security vision and strategy defined by the Cybersecurity Practice Head. This position is responsible for supporting and enhancing the security posture of our clients by leading security onsite implementation projects, reviewing IT operations, implementing best practices as per compliance standards and best practices for security hygiene, and ensuring compliance with audit and regulatory requirements for our esteemed clients to get Certified. Role Technical Requirements/Job Specifications: - Knowledge of ISO 27001 Implementation and Lead Auditor/ (LA certification). Enterprise audit experience with respect to security administration and information technology governance and internal audit experience in a multi- platform environment. Hands on ISO 27001 implementation, Full cycle Internal Audit's and Implementation experience. Drafting Information Security Policies & Procedures Drive implementation of policies / controls and enforce compliance. Have Conducted regular risk assessments to evaluate potential security risks to organizational assets. Audit and Compliance Experience: - Conduct risk assessments and ensure adherence to compliance standards such as ISO 27001 or industry-specific frameworks. Prepare for and support internal/external security audits, ensuring timely remediation of findings. Develop detailed compliance reports for clients and stakeholders. Collaboration and Communication:- Work closely with client IT teams to align security practices with business needs. Provide advisory support on emerging threats and recommend mitigation strategies. Stay updated on the latest security trends, tools, and technologies to enhance service delivery.

Job Title: Infrastructure Security Analyst Location : Bengaluru Company Description: ISECURION is a Cert-In Empaneled and ISO 27001:2022 Certified information security consulting company based in Bangalore. We offer innovative and research-driven information security services to our clients. Our business-oriented approach helps us cater to our client's security requirements based on their specific business types and processes. Are you a seasoned sales professional with a passion for cybersecurity? Join our team in Mumbai and Bengaluru and play a crucial role in driving the success of our Cyber Security Solutions. Job Summary: The IT Security Engineer will be responsible for managing and securing enterprise endpoints, performing patch and vulnerability management, conducting internal security assessments, and supporting audit and compliance activities. This role requires hands-on expertise in endpoint protection tools, vulnerability scanning, penetration testing, and threat mitigation. Key Responsibilities: Deploy, test, and manage Windows, Mac, and Linux OS patches and third-party updates using ManageEngine or equivalent tools. Troubleshoot failed patch installations and resolve related system-level issues. Monitor inbound email traffic to detect, analyze, and mitigate spam or phishing threats. Investigate and respond to malware, phishing, and endpoint security incidents. Manage application whitelisting and blacklisting as per organizational security policies using Trend Micro or similar endpoint protection solutions. Regularly update antivirus templates and endpoint protection policies based on the latest threat intelligence. Conduct vulnerability scanning of internal and external infrastructure, servers, and endpoints using tools such as Nessus, Nmap, SSLScan, Metasploit, and Kali Linux utilities. Perform web application penetration testing using tools like Burp Suite, Dirb, WPScan, and Amass. Analyse, prioritize, and remediate vulnerabilities identified during VAPT (Vulnerability Assessment and Penetration Testing) activities. Maintain and update an accurate IT asset inventory for patch management and security monitoring. Document and maintain records of system configurations, security policies, and patch schedules. Prepare and provide audit evidence and reports to support internal and external audit requirements. Conduct internal security reviews, phishing simulations, and cybersecurity awareness sessions for employees. Required Skills & Qualifications: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field. 1+ years of experience in IT Security, Endpoint Management, or Vulnerability Management. Hands-on experience with ManageEngine, Trend Micro, Nessus, Nmap, Burp Suite, and similar tools. Strong understanding of patch management, VAPT methodologies, and incident response. Good knowledge of Windows, Linux, and Mac OS environments. Excellent troubleshooting, analytical, and documentation skills. Certifications such as CEH, Security+, or CompTIA CySA+ would be an added advantage. Key Attributes: Strong problem-solving skills and attention to detail. Ability to work independently and in a team environment. Good communication and reporting skills. Proactive in identifying and mitigating potential security risks. How to Apply: Interested candidates should submit their resume and a cover letter to hr@isecurion.com With subject line as "Application for Infrastructure Security Analyst".

Role: - SOC Analyst Intern Joining: - Immediate Company Description: ISECURION is a leading cybersecurity services provider, ISO 27001:2022 certified and CERT-IN empaneled. We offer innovative solutions and cutting- edge research to address the evolving threats in the cyber landscape. We work with a diverse clientele, both global and Indian, to safeguard their digital assets, deliver strategic security consulting, and enhance their cyber resilience. Are You Passionate About Cybersecurity Role Description: The Security Operation Centre (SOC) Information Security Analyst are the first level responsible for ensuring the protection of digital assets from unauthorized access, identify security incidents and report to customers for both online and on-premises. The position monitors and responds to security events from managed customer security systems as part of a team on a rotating 24 x 7 x 365 basis. They are alert and aggressive to filter out suspicious activity and mitigate risks before any incident occurs. Your background should include exposure to security technologies including firewalls, IPS/IDS, logging, monitoring and vulnerability management. You should understand network security practices. Excellent customer service while solving problems should be a top priority for you. Main Responsibilities Tier 2 SOC analysts are incident responders, remediating serious attacks escalated from Tier 1, assessing the scope of the attack, and affected systems, and collecting data for further analysis. Work proactively to seek out weaknesses and stealthy attackers, review vulnerability assessments (CVEs) on monitored assets. Focus more on doing deep dives into datasets to understand what's happening during and after attacks. Monitor security events from the various SOC entry channels (SIEM, Tickets, Email and Phone), based on the security event severity and suspicious activities, escalate to managed service support teams, tier 3 information security specialists, and/or customer as appropriate to perform further investigation and resolution. Works as a Team lead for the SOC Analysts helping them to ensure that corporate data and technology platform components are safeguarded from known threats. Analyse the Events & incidents and identify the root cause. Work on keeping the SIEM platform up to date and contribute to security strategies as an when new threats emerge. Staying up to date with emerging security threats including applicable regulatory security requirements. Bring enhancements to SOC security process, procedures, and policies. Document and maintain customer build documents, security procedures and processes. Document incidents to contribute to incident response. Review critical incident reports and scheduled weekly & monthly reports and make sure they are technically and grammatically accurate. Keep updated with new threats, vulnerabilities, create/contribute to use cases, threat hunting etc. Other responsibilities and additional duties as assigned by the security management team or service delivery manager. Requirements: Min 0-6 Months Experience as SOC Analyst Process and Procedure adherence General network knowledge and TCP/IP Troubleshooting Ability to trace down an endpoint on the network, based on ticket information Familiarity with system log information and what it means Understanding of common network services (web, mail, DNS, authentication) Knowledge of host-based firewalls, Anti-Malware, HIDS Understanding of common network device functions (firewall, IPS/IDS, NAC) General Desktop OS and Server OS knowledge TCP/IP, Internet Routing, UNIX / LINUX & Windows. Excellent written and verbal communication skills Employment Type Internship Skills: Excellent event or log analytical skills Proven experience as IT Security Monitoring or similar role Exceptional organizing and time-management skills Very good communication abilities Skills: ELK and Wazuh SIEM, SentinelOne , Falcon Crowdstrike EDR and Microsoft Defender for