Penetration Tester

ISA; Pune City; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

ISA, a leading technology solution provider in the aviation industry, is seeking a skilled Security Engineer (Penetration Tester) located in Pune. The incumbent will be responsible for designing and managing security architecture, implementing robust solutions against cyber threats, and ensuring compliance with industry standards. The role demands expertise in firewall configurations, endpoint security strategies, and monitoring dark web activities. Candidates with strong analytical skills and over 5 years of relevant experience are encouraged to apply.

Qualifications

• 5+ years of experience in IT Security, Cybersecurity, and Threat Intelligence.
• Hands-on expertise in firewall management and endpoint security.
• Certifications like Microsoft Certified: Security Operations Analyst (SC-200) preferred.

Responsibilities

• Design and manage firewalls ensuring compliance with security frameworks.
• Monitor dark web for threats and manage security incidents.
• Implement Microsoft security layers to enhance organizational security.

Skills

Firewall & Network Security

Endpoint Security

Web Security

Cloud Security

Risk Management

Dark Web Monitoring

Fraud Investigation

Compliance Enforcement

Threat Hunting

Zero Trust Implementation

Education

Bachelor's degree in Information Technology or related field

Tools

Palo Alto

Fortinet

Cisco ASA

Check Point

Microsoft Defender

Job description

ISA is a premier technology solution provider for the Aviation industry. We are backed by Air Arabia and headquartered in Sharjah, UAE, while the Research and Development center is located in Colombo, Sri Lanka and Pune, India. We are a 100% owned subsidiary of Air Arabia

Location: Pune

https://isa.ae/

Address: Smartworks Building, Nexa Soft, Core Ops,5th Floor, 43EQ, Survey No 44, PLOT A, H. No. 8/1 (P, opp. Opp. Ravindranath Tagore School of Excellence, Balewadi, Pune, Maharashtra 411045

Job Title: Security Engineer (Penetration Tester)

Job Type: Full-time

Reports To: Security Architect

Job Overview:

We are seeking a highly skilled Security Engineer to design, implement, and manage the security architecture of our organization. The ideal candidate will be responsible for firewall and endpoint security, WAF implementation, VAPT, fraud investigation, dark web monitoring, brand monitoring, email security, and compliance enforcement. The role requires expertise in securing IT infrastructure, conducting risk assessments, ensuring compliance, and implementing Microsoft security layers to strengthen the organization's security posture.

Key Responsibilities:

• Design, configure, and manage firewalls (Palo Alto, Fortinet, Cisco ASA, Check Point).
• Deploy and maintain Web Application Firewalls (WAF) for web security (Cloudflare, Imperva, AWS WAF).
• Conduct regular firewall rule audits, optimize configurations, and enforce Zero Trust principles.

2. Microsoft Security Layer Implementation

a. Microsoft Email Security

• Configure and manage Microsoft Defender for Office 365 to protect against phishing, malware, and email threats.
• Implement Safe Links, Safe Attachments, and Anti-Phishing policies.
• Monitor and respond to email security alerts in Microsoft Security Portal.
• Conduct email security threat hunting using Defender for O365 and advanced hunting queries.
• Deploy and manage Microsoft Defender for Endpoint (MDE) to protect corporate devices.
• Enforce attack surface reduction (ASR) rules for endpoint protection.
• Configure endpoint compliance policies using Microsoft Intune.
• Implement DLP (Data Loss Prevention) policies to prevent data exfiltration.

c. Compliance & Risk Management

• Implement and monitor Microsoft Purview Compliance Manager for risk assessment.
• Configure and manage Conditional Access Policies in Microsoft Entra ID.
• Ensure compliance with security frameworks like ISO 27001, NIST, CIS, and GDPR.

3. Dark Web Monitoring & Brand Protection

• Monitor dark web forums, marketplaces, and underground networks for stolen credentials, data leaks, and insider threats.
• Implement dark web intelligence tools such as Recorded Future, Digital Shadows, or Microsoft Defender Threat Intelligence.
• Work with threat intelligence platforms to detect and respond to brand impersonation, phishing sites, and fraudulent domains.
• Collaborate with legal and compliance teams to enforce takedowns of malicious content.

4. Fraudulent Incident Investigation & Threat Hunting

• Investigate fraud incidents, phishing attempts, and business email compromise (BEC).
• Conduct forensic analysis on compromised endpoints, servers, and email accounts.
• Develop and implement threat intelligence and threat hunting processes.
• Work closely with SOC teams for incident response and mitigation.

5. VAPT & IT Security Operations

• Perform Vulnerability Assessments & Penetration Testing (VAPT) on infrastructure, applications, and cloud environments.
• Implement and manage intrusion detection/prevention systems (IDS/IPS).
• Monitor, analyze, and mitigate vulnerabilities from external and internal security scans.
• Work with teams to remediate vulnerabilities and harden IT assets.

6. IT Security & Compliance Management

• Develop and enforce security policies, standards, and procedures.
• Implement Zero Trust Architecture and IAM policies.
• Conduct security awareness training and phishing simulations.
• Ensure compliance with ISO 27001, NIST, CIS, PCI-DSS, GDPR, and other industry standards.

Required Qualifications & Skills:

Technical Skills:

Firewall & Network Security: Palo Alto, Fortinet, Cisco ASA, Check Point

Endpoint Security & EDR: Microsoft Defender, CrowdStrike, SentinelOne

WAF & Web Security: Imperva, AWS WAF, Akamai, Cloudflare

Cloud Security: Azure Security Center, AWS Security Hub, GCP Security Command Center

IAM & Zero Trust: Okta, Microsoft Entra ID, Conditional Access Policies, PAM

Dark Web & Brand Monitoring: Recorded Future, Digital Shadows, Microsoft Defender Threat Intelligence

Soft Skills:

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Ability to work independently and in cross-functional teams.
• Proactive security mindset with attention to detail.

Certifications (Preferred, but not mandatory):

️ Microsoft Certified: Security Operations Analyst (SC-200)

Experience Required:

5+ years of experience in IT Security, Cybersecurity, and Threat Intelligence.

Hands-on expertise in firewall management, endpoint security, WAF, email security, and compliance.

Strong experience in fraud investigation, dark web monitoring, and brand protection.

Proven ability to secure cloud, hybrid, and on-premise environments.

.

Please send resumes to [e-mail]

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Engineering and Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at ISA by 2x

Sign in to set job alerts for “Penetration Tester” roles.

Information Security & Control Analyst II

Cybersecurity Analyst / Security Operations Analyst

Information Security Engineer II-R-237522

Information Security Analyst/ Security Compliance Specialist

Information Security Analyst Level III - SIEM

SOC Analyst L2 (Onsite : Riyadh Location)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.