Jobs at SISA Information Security Pvt Ltd

Prepares accurate customer invoices using the correct legal entity and approved commercial terms. Reviews contracts and commercial documents, tracks billing milestones, identifies missing documentation, expired contracts, disputes, and billing holds, and coordinates with Sales and Delivery to resolve issues. Processes authorized credit and debit notes while maintaining documentation for invoice cancellations and amendments. Escalates deviations from contractual terms to the Revenue Manager.

Conduct penetration testing and secure code reviews across web, mobile, API, and thick-client applications. Identify and exploit OWASP Top 10, SANS CWE Top 25, and business logic vulnerabilities using manual and automated techniques. Communicate project status, support remediation with development and product teams, retest fixes, and follow up on unresolved vulnerabilities. Lead report walkthroughs with stakeholders and apply relevant security standards.

Perform network security assessments, including port scanning, service enumeration, vulnerability validation, basic exploitation, and manual false-positive reduction. Analyze network vulnerabilities, assess risk using CVE and CVSS, and document technical findings with evidence, impact, and remediation recommendations. Apply network security standards, frameworks, and threat models. Preferred experience includes scripting, firewall reviews, Active Directory, PCI DSS, ISO 27001, and related compliance benchmarks.

Supports the PMO by planning, coordinating, and monitoring multiple projects across timelines, budgets, scope, resources, risks, vendors, and deliverables. Prepares project plans, status reports, test plans, billing documentation, and stakeholder communications while tracking performance and maintaining project records. The role also involves coordinating cross-functional teams, supporting client satisfaction, identifying issues, and contributing to delivery process improvements.

Support information security compliance, governance, risk, and audit activities across products, infrastructure, vendors, and business operations. Responsibilities include monitoring compliance programs, conducting vendor security reviews, coordinating client audits, responding to security questionnaires, maintaining policies and evidence, supporting risk assessments, tracking remediation, and preparing dashboards and reports. The role requires collaboration with technical and business stakeholders and familiarity with ISO 27001, SOC 2, PCI DSS, and security frameworks.

Leads end-to-end quality assurance for web applications through manual and automated testing. Responsibilities include creating test strategies, developing UI and API automation frameworks, testing RESTful APIs and databases, managing defects, integrating tests into CI/CD pipelines, and mentoring junior QA engineers. The role supports Angular, .NET, and Python applications within Agile teams.

Supports B2B customers through technical troubleshooting, product installations, configurations, walkthroughs, and implementation documentation. Manages Windows and Linux servers, IIS, databases, cloud environments, networking, load balancers, SSL certificates, and data classification requirements. Collaborates with customers to define scanning scopes, schedules, and classification rules while maintaining SOPs and deployment runbooks. Provides L1/L2 support and may travel to customer or company locations as needed.

Owns the MXDR product line end-to-end, including strategy, roadmap, delivery, customer adoption, and business outcomes. Partners with engineering, architecture, security operations, sales, compliance, and executives to prioritize investments and deliver predictable releases. Guides AI/ML, LLM, RAG, data, search, security governance, disaster recovery, and enterprise architecture strategy while communicating product trade-offs to technical and executive stakeholders.

Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.

Plan and perform PCI DSS assessments, conduct risk and gap analyses, gather compliance evidence, identify deficiencies, prepare audit reports, support QSA-led validation, maintain security documentation, monitor regulatory changes, train teams, and track remediation through closure.

Manage AWS EKS/Kubernetes infrastructure, cloud services, CI/CD pipelines, microservice deployments, databases, Kafka, Elasticsearch, monitoring, security, scaling, production support, rollbacks, and incident resolution. The role requires hands-on expertise with AWS, Azure DevOps, C#/.NET, FastAPI, PostgreSQL, MSSQL, Docker, Helm, IAM/RBAC, TLS/mTLS, WAF, CloudWatch, Prometheus, and Grafana.

Develop, test, deploy, troubleshoot, and optimize Logstash pipelines and Grok parsers for high-volume security and infrastructure logs. Normalize events to ECS or SIEM schemas, resolve parsing and ingestion issues, diagnose Elasticsearch mapping errors, and ensure reliable, lossless pipeline performance. Conduct regression testing, root-cause analysis, production stabilization, documentation, and L2 support while mentoring junior engineers and coordinating with SOC, integration, product, and engineering teams.

Prepares accurate customer invoices based on contractual terms and the correct legal entity. Reviews contracts, billing milestones, purchase orders, statements of work, disputes, and billing holds. Maintains billing records, coordinates with Sales and Delivery to resolve documentation gaps, escalates deviations, and processes authorized credit notes, debit notes, cancellations, and amendments with appropriate approvals.

Lead SISA’s analyst relations program by engaging industry analysts and advisory firms, developing compelling narratives, coordinating briefings and submissions, and strengthening market positioning across cybersecurity and payments-focused categories. Collaborate with marketing, product marketing, leadership, sales, and subject-matter experts to communicate SISA’s capabilities, customer outcomes, and strategic perspective to enterprise buyers, partners, and the broader market.

Develop and execute go-to-market strategies, product launches, integrated campaigns, demand generation, sales enablement, and content programs. Manage marketing funnels, analyze performance and ROI, conduct market and competitive research, perform win-loss analysis, and provide recommendations to improve positioning, messaging, pipeline, and revenue. Collaborate with business leaders, product, sales, customer success, analysts, and subject matter experts.

Manage and audit end-to-end IT infrastructure, including Windows and Linux servers, networking, virtualization, cloud platforms, security tools, backups, and disaster recovery. Troubleshoot incidents, perform root-cause analysis, support vulnerability remediation, maintain ITIL/ITSM processes, manage vendors and SLAs, and ensure infrastructure security, availability, compliance, and continuity. Maintain technical documentation and explore AI and automation opportunities for IT operations.

Plans and conducts PCI DSS audits, risk assessments, and gap analyses; gathers evidence, identifies noncompliance, recommends remediation, prepares audit reports, and supports QSA validation. Maintains PCI-related policies and controls, monitors regulatory changes, trains internal teams, and tracks remediation through closure. Requires strong knowledge of PCI DSS v4.0, IT security, risk management, audit practices, and related frameworks such as NIST and ISO 27001.

Conduct proactive threat hunting with IBM QRadar SIEM, analyze security events across endpoints, networks, cloud, and applications, investigate and respond to threats, and develop detection rules, dashboards, and use cases. Integrate threat intelligence, perform root cause analysis, document findings, collaborate with SOC and infrastructure teams, and participate in security assessments and red/blue team exercises.

The Sales Consultant will develop sales strategies, achieve revenue targets, build and manage client relationships, identify new business opportunities, present tailored proposals, and analyze sales performance. The role involves collaborating with internal teams, monitoring industry and competitor trends, and delivering strong customer service. Candidates need at least five years of account management or sales experience, a proven record of exceeding targets, strong communication and negotiation skills, and proficiency with CRM software and Microsoft Office.

Conduct proactive threat hunting using IBM QRadar SIEM, investigate security events and suspicious activity, develop detection rules and dashboards, integrate threat intelligence, support incident response, perform root-cause analysis, document findings, and participate in red/blue team exercises and attack simulations.