Securisti Consulting

Securisti Consulting LLP is a rapidly growing consulting company that believes in democratizing cybersecurity through an unwavering commitment to “Bespoke Security” and vision of making “Cyber Security for All” a reality. Securisti provides a complete suite of cybersecurity services such as implementation and sustenance of ISO 27001 & 22301, Managed GRC, Cyber Risk monitoring, Third Party Risk Management, Cybersecurity framework design and implementation (IRDAI / RBI / PFRDA / SEBI), vCISO services, Table Top exercises and IR simulations, Managed Incident Response, Technical Vulnerability Management and Security testing. For more details visit: https://securisti.com/ We currently are expanding our GRC operations and have multiple requirements for candidates interested in switching to or already having experience of GRC. Total Positions 1. GRC Consultant : exp 3-5 years 2. Senior Associate/Associate : exp 1-3 years 3. Trainee and Intern : exp 0-1 year Experience and Responsibilities: • Develop and implement GRC strategies, policies and procedures as per regulatory, legal requirements and organizational goals. • Performing Risk Assessment, recommend Internal Controls, conduct Security Audits and implement Risk Mitigation strategies. • Monitoring and reporting risk exposures to top management. • Strong knowledge of information security principles and best practices. • Clear understanding of Governance, Risk and Compliance principles and fundamentals • Proficiency in conducting Security Audits, Internal Controls and Risk Assessment, Third Party Risk Assessments and Audits, • Knowledge on ISO 27001 / ISO 22301 / NIST / Privacy implementation and lifecycle maintenance etc. • Ability to work independently and as part of a team and guide other team members • Understanding of Legal aspects of Cybersecurity (Service Agreements / Non Disclosure Agreements) • Ability to independently handle audits such as ISO 27001 & 22301, Third Party Risk Management and RFPs etc. Qualifications and Skills : • Experience : 0-5 Years • Certifications : ISO 27001 LA / LI, ISO 22301 LA / LI • Qualification : Bachelor's or Master's degree • Language : Good written and communication skills (English) • Competencies in NIST / DPDPA / IRDAI / RBI / PFRDA / SEBI CSCRF / SOC2 / ITGC / IT Systems & Network, Cloud security fundamentals

Job description Securisti Consulting LLP is a rapidly growing consulting company that believes in democratizing cybersecurity through an unwavering commitment to “Bespoke Security” and vision of making “Cyber Security for All” a reality. Securisti provides a complete suite of cybersecurity services such as implementation and sustenance of ISO 27001 & 22301, Managed GRC, Cyber Risk monitoring, Third Party Risk Management, Cybersecurity framework design and implementation (IRDAI / RBI / PFRDA / SEBI), vCISO services, Table Top exercises and IR simulations, Managed Incident Response, Technical Vulnerability Management and Security testing. For more details visit: https://securisti.com/ We are currently expanding our GRC operations and have the below open position. 1. GRC Consultant Experience and Responsibilities: • Develop and implement GRC strategies, policies and procedures as per regulatory, legal requirements and organizational goals. • Performing Risk Assessment, recommend Internal Controls, conduct Security Audits and implement Risk Mitigation strategies. • Monitoring and reporting risk exposures to top management. • Strong knowledge of information security principles and best practices. • Clear understanding of Governance, Risk and Compliance principles and fundamentals • Proficiency in conducting Security Audits, Internal Controls and Risk Assessment, Third Party Risk Assessments and Audits, • Knowledge on ISO 27001 / ISO 22301 / NIST / Privacy implementation and lifecycle maintenance etc. • Ability to work independently and as part of a team and guide other team members • Understanding of Legal aspects of Cybersecurity (Service Agreements / Non Disclosure Agreements) • Ability to independently handle audits such as ISO 27001 & 22301, Third Party Risk Management and RFPs etc. Qualifications and Skills : • Experience : 5-7 Years • Certifications : CISA (Mandatory), ISO 27001 LA / LI, ISO 22301 LA / LI • Qualification : Bachelor's or Master's degree • Language : Good written and communication skills (English) • Competencies in NIST / DPDPA / IRDAI / RBI / PFRDA / SEBI CSCRF / SOC2 / ITGC / IT Systems & Network, Cloud security fundamentals

Job description: Job Summary: We are looking for a highly skilled and experienced Team Lead - VAPT to spearhead offensive security engagements for our Technical Cyber Security services division. With at least 4-5 years in the industry, the ideal candidate will bring deep technical expertise, strong leadership, and a passion for proactive security testing. You will lead end-to-end VAPT projects, mentor junior analysts, engage directly with clients, and contribute to enhancing our offensive security capabilities in a dynamic threat landscape. Key Responsibilities: Lead VAPT projects across multiple domains, including network, application, cloud, mobile, API, and wireless security testing. Conduct manual and automated penetration testing, simulate real-world attacks, and identify exploitable vulnerabilities. Develop and maintain custom scripts, tools, and exploits to support advanced testing scenarios. Prepare and deliver detailed technical reports and executive summaries with risk ratings, evidence, and remediation guidance. Collaborate with blue teams and SOC for red/purple teaming and threat emulation exercises. Engage in client communication, providing technical guidance and post-assessment support. Ensure quality assurance across all deliverables and maintain compliance with cybersecurity standards and frameworks. Continuously research new vulnerabilities, attack methods, and testing tools to improve service offerings. Mentor junior team members and contribute to the development of internal methodologies and playbooks. Required Qualifications: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent hands-on experience). Minimum 4-5 years of hands-on experience in VAPT, offensive security, or ethical hacking. In-depth knowledge of OWASP Top 10, MITRE ATT&CK, NIST, Risk Based Vulnerability Management and common vulnerability scoring systems (CVSS). Proficiency with offensive security and testing tools (e.g. Burp Suite, Nmap, Metasploit, Nessus, Nikto, Kali Linux,etc.) Strong understanding of network protocols, system internals, web/app architectures, and cloud platforms (AWS, Azure, GCP). Scripting experience in Python, Bash, or PowerShell for automation and custom exploits. Excellent communication skills for reporting, documentation, and client interaction. Preferred Certifications (One or More): CEH - Mandatory OSCP (Offensive Security Certified Professional) – Strongly preferred GPEN, CRT, eCPPT, OSCE, or other offensive security credentials Cloud security certifications (e.g., AWS Security Specialty, AZ-500) are a plus Desirable Skills: Experience in Red Team, Purple Team, or Threat Emulation engagements Exposure to DevSecOps, CI/CD pipelines, and integrating security in SDLC\ Familiarity with compliance-driven testing (e.g., PCI DSS, ISO 27001, SOC 2, HIPAA) Client-facing experience in a consulting or MSSP environment Experience: VAPT: 5 years (Preferred)

As a skilled and proactive SOC Lead, you will play a crucial role in managing and enhancing our Security Operations Center capabilities. Your strong experience in cybersecurity operations, threat analysis, incident response, and team leadership will be instrumental in establishing and overseeing the SOC process. You will lead the day-to-day monitoring, manage a team of analysts, and drive the evolution of our threat detection and response processes. Your key responsibilities will include implementing various SIEM / XDR solutions, leading and coordinating the daily operations of the Security Operations Center, and supervising and mentoring SOC analysts. You will provide guidance on threat detection, triage, and incident handling, as well as review, escalate, and respond to security incidents in a timely manner. Continuous improvement of SOC playbooks, procedures, and incident response plans will be under your purview, along with overseeing threat intelligence gathering and its integration into detection capabilities. Collaboration with IT, network, and application teams to enhance security posture, leading threat-hunting initiatives, and proactively identifying potential risks are also part of your responsibilities. Moreover, you will be responsible for maintaining and optimizing SIEM, SOAR, and other security tools for effective coverage and alerting, while staying current on emerging threats, vulnerabilities, and best practices in security operations. To qualify for this role, you should have a Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience. A minimum of 5-6 years of experience in cybersecurity, including at least 2 years of team handling experience, is required. Deep understanding of XDR / SIEM platforms, hands-on experience with incident response, threat analysis, malware analysis, and vulnerability management, as well as knowledge of attack frameworks and regulatory frameworks are essential. Strong analytical, problem-solving, and communication skills are also necessary. Preferred qualifications include professional certifications such as GCIA, GCIH, CEH, CISSP, ECIH, CHFI, experience with SOAR platforms and automation of security workflows, and exposure to cloud security environments and monitoring. If you are looking to make an impact in the field of cybersecurity and lead a dynamic team in safeguarding our organization's assets, this role as a SOC Lead is the perfect opportunity for you. Join us in our mission to stay ahead of emerging threats and ensure the highest level of security for our operations.,

Job description: About the Role: We are seeking a skilled and proactive SOC Lead to manage and enhance our Security Operations Center capabilities. The ideal candidate will have strong experience in cybersecurity operations, threat analysis, incident response, and team leadership. As SOC Lead, you will be responsible for establishment of SOC, overseeing day-to-day monitoring, managing a team of analysts, and evolving our threat detection and response processes. Key Responsibilities: Implement various SIEM / XDR solutions and establish the SOC process Lead and coordinate the daily operations of the Security Operations Center. Supervise and mentor SOC analysts, providing guidance on threat detection, triage, and incident handling. Review, escalate, and respond to security incidents in a timely and efficient manner. Continuously improve SOC playbooks, procedures, and incident response plans. Oversee threat intelligence gathering and its integration into detection capabilities. Ensure high-quality documentation of security incidents, lessons learned, and remediation actions. Collaborate with IT, network, and application teams to strengthen the security posture. Lead threat-hunting initiatives and proactively identify potential risks. Maintain and optimize SIEM, SOAR, and other security tools to ensure effective coverage and alerting. Stay current on emerging threats, vulnerabilities, and best practices in security operations. Required Qualifications: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience). 5–6 years of experience in cybersecurity, with at least 2 years in team handling experience. Deep understanding of XDR / SIEM platforms (e.g., Crowdstrike, SentinelOne, Sophos, Wazuh, Seceon, Simbian, etc.). Hands-on experience with incident response, threat analysis, malware analysis, and vulnerability management. Knowledge of attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Familiarity with regulatory frameworks (e.g., ISO 27001, NIST, GDPR, etc.). Strong analytical, problem-solving, and communication skills. Preferred Qualifications: Professional certifications such as GCIA, GCIH, CEH, CISSP, ECIH, CHFI. Experience with SOAR platforms and automation of security workflows. Exposure to cloud security environments and monitoring (AWS, Azure, GCP) Experience: Security Operations Centre: 5 years (Preferred)