Jobs at SISA Information Security Pvt Ltd

Leads end-to-end quality assurance for web applications through manual and automated testing. Responsibilities include creating test strategies, developing UI and API automation frameworks, testing RESTful APIs and databases, managing defects, integrating tests into CI/CD pipelines, and mentoring junior QA engineers. The role supports Angular, .NET, and Python applications within Agile teams.

Supports B2B customers through technical troubleshooting, product installations, configurations, walkthroughs, and implementation documentation. Manages Windows and Linux servers, IIS, databases, cloud environments, networking, load balancers, SSL certificates, and data classification requirements. Collaborates with customers to define scanning scopes, schedules, and classification rules while maintaining SOPs and deployment runbooks. Provides L1/L2 support and may travel to customer or company locations as needed.

Owns the MXDR product line end-to-end, including strategy, roadmap, delivery, customer adoption, and business outcomes. Partners with engineering, architecture, security operations, sales, compliance, and executives to prioritize investments and deliver predictable releases. Guides AI/ML, LLM, RAG, data, search, security governance, disaster recovery, and enterprise architecture strategy while communicating product trade-offs to technical and executive stakeholders.

Conduct full-scope red team engagements across network, application, cloud, social engineering, and physical attack vectors. Simulate advanced adversaries using MITRE ATT&CK, exploit vulnerabilities, develop tools and payloads, perform evasion and lateral movement, and collaborate with Blue and Purple Teams. Produce executive and technical reports, communicate business risks, and remain current on attacker techniques, APT campaigns, and security research.

Plan and perform PCI DSS assessments, conduct risk and gap analyses, gather compliance evidence, identify deficiencies, prepare audit reports, support QSA-led validation, maintain security documentation, monitor regulatory changes, train teams, and track remediation through closure.

Manage AWS EKS/Kubernetes infrastructure, cloud services, CI/CD pipelines, microservice deployments, databases, Kafka, Elasticsearch, monitoring, security, scaling, production support, rollbacks, and incident resolution. The role requires hands-on expertise with AWS, Azure DevOps, C#/.NET, FastAPI, PostgreSQL, MSSQL, Docker, Helm, IAM/RBAC, TLS/mTLS, WAF, CloudWatch, Prometheus, and Grafana.

Develop, test, deploy, troubleshoot, and optimize Logstash pipelines and Grok parsers for high-volume security and infrastructure logs. Normalize events to ECS or SIEM schemas, resolve parsing and ingestion issues, diagnose Elasticsearch mapping errors, and ensure reliable, lossless pipeline performance. Conduct regression testing, root-cause analysis, production stabilization, documentation, and L2 support while mentoring junior engineers and coordinating with SOC, integration, product, and engineering teams.

Prepares accurate customer invoices based on contractual terms and the correct legal entity. Reviews contracts, billing milestones, purchase orders, statements of work, disputes, and billing holds. Maintains billing records, coordinates with Sales and Delivery to resolve documentation gaps, escalates deviations, and processes authorized credit notes, debit notes, cancellations, and amendments with appropriate approvals.

Lead SISA’s analyst relations program by engaging industry analysts and advisory firms, developing compelling narratives, coordinating briefings and submissions, and strengthening market positioning across cybersecurity and payments-focused categories. Collaborate with marketing, product marketing, leadership, sales, and subject-matter experts to communicate SISA’s capabilities, customer outcomes, and strategic perspective to enterprise buyers, partners, and the broader market.

Develop and execute go-to-market strategies, product launches, integrated campaigns, demand generation, sales enablement, and content programs. Manage marketing funnels, analyze performance and ROI, conduct market and competitive research, perform win-loss analysis, and provide recommendations to improve positioning, messaging, pipeline, and revenue. Collaborate with business leaders, product, sales, customer success, analysts, and subject matter experts.

Manage and audit end-to-end IT infrastructure, including Windows and Linux servers, networking, virtualization, cloud platforms, security tools, backups, and disaster recovery. Troubleshoot incidents, perform root-cause analysis, support vulnerability remediation, maintain ITIL/ITSM processes, manage vendors and SLAs, and ensure infrastructure security, availability, compliance, and continuity. Maintain technical documentation and explore AI and automation opportunities for IT operations.

Plans and conducts PCI DSS audits, risk assessments, and gap analyses; gathers evidence, identifies noncompliance, recommends remediation, prepares audit reports, and supports QSA validation. Maintains PCI-related policies and controls, monitors regulatory changes, trains internal teams, and tracks remediation through closure. Requires strong knowledge of PCI DSS v4.0, IT security, risk management, audit practices, and related frameworks such as NIST and ISO 27001.

Conduct proactive threat hunting with IBM QRadar SIEM, analyze security events across endpoints, networks, cloud, and applications, investigate and respond to threats, and develop detection rules, dashboards, and use cases. Integrate threat intelligence, perform root cause analysis, document findings, collaborate with SOC and infrastructure teams, and participate in security assessments and red/blue team exercises.

The Sales Consultant will develop sales strategies, achieve revenue targets, build and manage client relationships, identify new business opportunities, present tailored proposals, and analyze sales performance. The role involves collaborating with internal teams, monitoring industry and competitor trends, and delivering strong customer service. Candidates need at least five years of account management or sales experience, a proven record of exceeding targets, strong communication and negotiation skills, and proficiency with CRM software and Microsoft Office.

Conduct proactive threat hunting using IBM QRadar SIEM, investigate security events and suspicious activity, develop detection rules and dashboards, integrate threat intelligence, support incident response, perform root-cause analysis, document findings, and participate in red/blue team exercises and attack simulations.

Supports IBM QRadar SIEM operations by monitoring platform health, validating telemetry, onboarding log sources, troubleshooting parsing and connectivity issues, and assisting with patching, correlation testing, dashboards, backups, access controls, and documentation. Collaborates with SOC and incident-response teams to maintain reliable event ingestion, normalization, retention, and security monitoring.

Conduct regulatory compliance audits for financial-sector clients by interpreting Indian regulatory requirements, translating them into control frameworks, performing risk assessments and evidence reviews, identifying gaps, preparing audit reports, tracking remediation, and supporting regulatory queries. The role engages senior stakeholders, compliance teams, IT personnel, and regulators while managing audit timelines and deliverables.

Administers and monitors Elasticsearch clusters, configures Logstash pipelines, and manages Kibana dashboards. Provides Level 1 support, troubleshoots ELK issues, assists users with queries and visualizations, maintains technical documentation, and collaborates with development and stakeholder teams on ELK integrations.

Conduct regulatory compliance audits for financial-sector clients under RBI, SEBI, IRDAI, UIDAI, and related requirements. Interpret circulars and advisories, convert obligations into testable controls, perform risk assessments and evidence validation, identify gaps, prepare audit reports, support regulatory inquiries, and track remediation. The role requires engagement with executives, compliance teams, IT stakeholders, and regulators, plus strong documentation and stakeholder-management skills.

Serves as the SOC escalation point for complex QRadar incidents. Conducts deep-dive investigations, threat hunting, log correlation, malware and phishing analysis, rule tuning, and incident response coordination. Develops AQL searches and detection use cases, integrates threat intelligence, leads root cause analysis, supports vulnerability and patch validation, mentors L1 analysts, and improves SOC processes and playbooks.