Data Scientist

About the Role 

We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership. 

Key Responsibilities 

VAPT & Red Team Operations 

• Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure. 
• Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized. 
• Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs). 
• Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments. 
• Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements. 
• Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems. 
• Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks. 
• Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance. 
• Re-test remediated findings and track closure with engineering and IT teams through to verification. 

ISO Compliance & Governance 

• Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans. 
• Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301. 
• Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators. 
• Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation. 
• Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle. 
• Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable. 
• Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates. 
• Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training. 
• Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring. 
• Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps). 

Incident Response & Continuous Improvement 

• Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews. 
• Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises. 
• Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements. 

Required Qualifications 

• 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits. 
• Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments. 
• Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK. 
• Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP. 
• Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust). 
• Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end. 
• Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301. 
• Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths. 
• Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk. 
• Strong report-writing, policy-drafting, and executive communication skills. 
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). 

Preferred Qualifications 

• Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical. 
• Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC. 
• Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer). 
• Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools. 
• Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques. 
• Experience with container, Kubernetes, and serverless security testing. 
• Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS. 
• Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust). 
• Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure. 
• Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy. 

Job Description:

Candidate must have 2 to 5-years of experience in various phase of development of a python-based application or API development.

Requirements:

Must Have:  Strong expertise in PYTHON and its built-in data structures, developing API using flask or fastapi, data wrangling using standard python frameworks like pandas, NumPy etc., integration of various applications (third party or inhouse) with python.

Good to Have: Deployment using Nginx, GUnicorn, IIS, docker and Kubernetes etc. Good understanding of optimization solutions like differential evolution. Hands on experience with python packages like Scipy.  Tkinter to make python-based applications.

Roles and Responsibilities:

• Understanding/gathering the requirements from stakeholder, formulating the problem, and leveraging AI/ML to solve the business problems.
• Integration of third party or in house application with python solution.
• Working on Deployment and optimization of various engineering problems using Numerical/Constraint optimization frameworks such as Differential Evolution and deploy a web-based API using Flask and Nginx/IIS.
• Unit testing of various python modules developed and testing of the API.

1. Promote and sell Orient Blackswan’s range of Higher Education books to colleges and universities in the assigned area.
2. Regularly visit colleges and universities, faculty members, and booksellers to drive sales.
3. Ensure the achievement of both sales and collections targets for the assigned areas.
4. Build strong, long-term relationships with colleges and universities, faculty members and booksellers.
5. Maintain detailed records of sales activities, feedback from customers, and competitive intelligence and submit regular reports to the regional sales manager.
6. Stay updated on market trends, competitor activities and new opportunities in the assigned area.

-Designing, developing, and maintaining both the front-end and back-end of web applications.

-Integrating Payment Gateway, POS & Loyalty systems (such as Freedom Pay, Card Connect, Auth.net, Square, Oracle, Olo, NCR, Clover, Deliverer, etc. if applicable).

-Having experience with Svelte and Azure Cosmos DB is a plus.

-Using .NET Core/MVC, MSSQL, Angular 8+, and Web API.

-Designing, building, and maintaining efficient and reusable C# code using design patterns.

-Building and consuming J SON-based ASP.NET Web API services.

-Executing patches and proactive remediation for Legacy Applications, including designing, developing, and testing web applications with .NET, HTML, CSS, and other technologies.

-May lead the work of others and provide ideas to enhance software applications.

-Applying software design and development principles such as SOLID, Domain-Driven Design, and Object-Oriented Development.

-Familiarity with ORM frameworks, particularly the Entity Framework.

-Participating in architectural meetings and analyzing technical requirements for .NET applications.

-Managing source code with Git, including Git Flow Workflow.

-Implementing enterprise application patterns.

-Paying attention to details and having excellent organizational skills.

-Possessing excellent communication and teamwork skills.

Package Bike Delivery Boy for Dubai

Job Description:

We are looking for reliable and hardworking individuals to join our team as Bike Delivery Boys in Dubai. This is an excellent opportunity for individuals looking to start or further their career in the delivery industry.

Key Responsibilities:

• Safely and efficiently deliver packages to designated locations.
• Ensure timely delivery of goods as per the company’s schedule.
• Maintain the condition of the bike and report any issues immediately.
• Follow traffic rules and company safety guidelines.
• Provide excellent customer service by being polite and professional.

Qualifications and Requirements:

• Age: 21 to 40 years old.
• Language: Basic English is required.
• Physical Ability: Must be physically fit to ride a bike for extended periods.
• License: No prior bike license required; training and license will be provided.

Location: Dubai, UAE

Salary: Fixed AED 2,150 per month

Overtime: AED 7.5 per delivery commission

Employment Type: Direct Employment Visa

Process Timeline:

- India Process: 15 to 20 days.

- Dubai Process: 1 to 1.5 months to obtain a bike license.

Benefits:

• Free accommodation.
• Emirates ID provided.
• International bike license.
• Bike, fuel, and maintenance costs covered by the company.
• SIM card and recharge provided by the company.
• Comprehensive insurance coverage.

About Company:

Headquartered in Houston, Texas, USA, this product-based company is the FinTech leader in B2B Industry’s (AI) Artificial Intelligence-powered Software suite of products in the Order-to-Cash and Treasury Management space.

With close to 2000 plus employees globally, this product-based company preferred choice of leading Fortune 1000 companies, including Adidas, Danone, Starbucks, 3M and Sony, to name a few. 950+ Transformation Projects, 6 continents and 45 countries and many more adding up year on year.

Skills

Experience Range: 3 to 10 Years
Notice Period: Immediate to max 1 month.

Role: Senior Software Engineer – the final role will depend on candidate’s experience and credentials

Education: BE/B. Tech/MCA/M.Sc./MTech

Technology Stack: Java, Struts, Hibernate, Spring, MySQL, ExtJS, Elastic Search, AWS Infra/any cloud

Location: Hyderabad

Please share your profiles only if you can join in 1 month.

a. Expert in Core PHP & OOP Concepts

b. Medium in Mysql DB

c. Expert in HTML & JS/Jquery

d. Knowledge on CSS id preferred

e. Experience on any one of the MVC framework is mandatory

Roles and Responsibilities

Serve as an integrator between business needs and technology solutions, helping to create technology solutions to meet clients business needs. 

Defining systems strategy, developing system requirements, designing and prototyping, testing, training, defining support procedures and implementation. 

Perform accurate analysis and effective diagnosis of client issues and manage day-to-day client relationships at peer client levels. 

Desired Candidate Profile

• 1+ years of relevant technology consulting or industry experience 
•  Strong working knowledge of AEM/Digital Marketing Suite 
•  Java, J2EE strong knowledge in Web-centric applications 
• Experience with full lifecycle of application from requirement gathering to deployment.
• Make changes to AEM site content, assets, and workflow
• Designs and builds components, templates, dialogs, and workflows using the AEM architecture (Sling, CRX, OSGI, JCR)
• Diagnoses and solves technical problems related to content management such as search result accuracy, dynamic content linking, formatting, image scaling, internationalization, and personalization
• Works in an agile, rapid development and prototyping environment
• Strong Java programming foundation and experience with OSGi bundles
• Knowledge on workflows ,Sling servlet, REST, JSON, Lucene indexing.
• Exposure to Coral / Granite UI, Adobe UI customization is a must
• Working Experience with Sightly / Sling models.
• Willingness to travel offshore and onshore 
• Strong knack and willingness for adapting latest and greatest technologies to drive performance.
• Exceptionally good at document and explaining core technical processes.

Perks and Benefits

• A Silver Adobe Solution partner, AEM Specialized and Magento partner
• Get to work with a young and dynamic team.
• Get to experience Agile methodology for real.
• Flexi timings.
• Exposure to one of the most exclusive technology of the hour AEM, Magento
• A team that will support you when you want to take an initiative in the favour of the organization.