Project Manager - Tech

About the Role 

We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership. 

Key Responsibilities 

VAPT & Red Team Operations 

• Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure. 
• Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized. 
• Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs). 
• Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments. 
• Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements. 
• Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems. 
• Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks. 
• Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance. 
• Re-test remediated findings and track closure with engineering and IT teams through to verification. 

ISO Compliance & Governance 

• Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans. 
• Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301. 
• Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators. 
• Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation. 
• Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle. 
• Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable. 
• Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates. 
• Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training. 
• Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring. 
• Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps). 

Incident Response & Continuous Improvement 

• Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews. 
• Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises. 
• Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements. 

Required Qualifications 

• 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits. 
• Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments. 
• Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK. 
• Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP. 
• Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust). 
• Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end. 
• Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301. 
• Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths. 
• Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk. 
• Strong report-writing, policy-drafting, and executive communication skills. 
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). 

Preferred Qualifications 

• Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical. 
• Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC. 
• Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer). 
• Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools. 
• Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques. 
• Experience with container, Kubernetes, and serverless security testing. 
• Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS. 
• Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust). 
• Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure. 
• Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy. 

📌 Job Title: Software Test Engineer (Manual Testing)

Company: Pentabay Softwares

Experience: 1 – 5 Years

Location: Anna Salai (Mount Road), Chennai

Employment Type: Full-time, Onsite

🔍 Job Description

Pentabay Softwares is looking for a Software Test Engineer (Manual Testing) with 1–5 years of hands-on experience to join our growing team. The ideal candidate should have strong knowledge of manual testing concepts, excellent attention to detail, and the ability to work closely with developers and product teams to ensure high-quality software delivery.

🧪 Roles & Responsibilities

• Understand project requirements, functional specifications, and business workflows
• Design, write, and execute test cases based on requirements
• Perform Manual Testing including:
• Functional Testing
• Regression Testing
• Smoke & Sanity Testing
• Integration Testing
• UAT Support
• Identify, log, track, and verify bugs using bug-tracking tools
• Collaborate with development teams to reproduce issues and validate fixes
• Prepare test reports, test summary documents, and defect metrics
• Participate in requirement reviews and provide testability feedback
• Ensure timely delivery of high-quality releases

🛠️ Required Skills

• Strong knowledge of Software Testing Life Cycle (STLC)
• Hands-on experience in Manual Testing
• Good understanding of SDLC models (Agile / Waterfall)
• Experience in writing test cases, test scenarios, and test plans
• Knowledge of defect life cycle
• Familiarity with bug tracking tools (JIRA or similar – added advantage)
• Basic understanding of SQL is a plus
• Good analytical and problem-solving skills

🎯 Candidate Requirements

• 1–5 years of relevant experience in Manual Testing
• Bachelor’s degree in Computer Science / IT or related field
• Good communication and documentation skills
• Ability to work independently and in a team environment

🌟 Why Join Pentabay Softwares?

• Work on real-time projects with growing technologies
• Collaborative and learning-driven work environment
• Opportunity to enhance skills and grow your career

Sent Resumes to: sandhiya.m at pentabay.com

Role Description

This is a full-time hybrid role for IT Sales based in Mumbai. The selected candidate will be responsible for lead generation, managing client accounts, building strong customer relationships, and identifying new business opportunities. This role requires a deep understanding of IT solutions and services, along with the ability to effectively communicate value propositions to clients.

Qualifications

• Strong knowledge and experience in IT Sales and Information Technology
• Skills in Lead Generation and Account Management
• Creating Email Sequences using Email Automation tools
• Writing Impactful & high converting emails
• Exceptional communication and interpersonal abilities
• Proficiency in understanding client requirements and translating it to a professional proposal
• Proactive approach to identifying opportunities and delivering results
• Previous experience in a technology-related sales role is preferred
• Writing Proposals
• use of AI tools for creating workflows

Company Description

Thinkbar is a dynamic digital solutions company dedicated to turning innovative ideas into reality. With expertise in website development, app creation, and digital marketing, we focus on delivering user-friendly experiences that elevate brands online. From SEO optimization to designing exceptional UI/UX, our solutions are customized to meet client needs. Backed by decades of experience, Thinkbar is committed to helping businesses thrive in the ever-evolving digital world.

Presenting lessons in a comprehensive manner and using visual/audio means to facilitate learning.

Providing individualized instruction to each student by promoting interactive learning

Create and distribute educational content (notes, summaries, assignments etc.)

Assess and record students’ progress and provide grades and feedback.

Maintain a tidy and orderly classroom.

Collaborate with other teachers, and parents and participate in meetings as an when required.

Observe and understand students’ behaviour and psyche.

Develop and enrich professional skills and knowledge by attending seminars, conferences etc.

Explaining the concepts in easy and understandable terms to the students.

Using real-life examples to teach geometrical concepts.

Developing students' interest in subjects.

Planning and creating teaching materials.

You will also be responsible for assigning homework, grading assignments and quizzes, and documenting students' progress. Etc.,

• Building and maintaining relationships with customers
• Achieving sales targets
• Regular follow-ups and getting feedbacks from the customers

• Graduate degree with a strong academic performance from a top tier university
• You can think in terms of the big picture but deliver on the details
• You have an instinct for great product design and are an advocate for new features with qualitative and quantitative reasoning
• You do whatever it takes to make your product and team successful, whether that means writing a testing plan, analyzing large data sets, or hunting down the root cause of a user’s frustration
• You can turn incomplete, conflicting, or ambiguous inputs into solid action plans
• You communicate with empathy, precision, and clarity
• You are technical enough to ask engineers good questions about architecture and product decisions alike
• Beyond just shipping new products, you obsess about continuous product improvement
• While we generally value attitude over skills, we expect that you’ve spent at least five years in a fast-paced product management role

What you will be doing:

• Grow an efficient, collaborative team of data scientists, data engineers, and BI developers by hiring, coaching, mentoring, and sharing feedback that preserves company culture and values
• Prioritize work for your team, making rational tradeoffs on priorities based on business constraints, ensuring on-time deliverables and high-quality solutions
• Working with our Engineering teams to improve and advance our development practices based on a data-driven and analytical approach
• Collaborate and maintain a high level of interaction and cooperation with technical and non-technical stakeholders across Gelato
• Partner closely with our product team and stakeholders to improve planning and prioritization
• Drive the analytics and data science roadmap in Gelato
• Work in European time zones
• Who you are

Role/Title: Functional QA

Location: Mumbai/Bangalore 

Fulltime/Permanent role

Notice period should not exceed more than 60days

Job Responsibilities:

Test Analyst:

• Good Communicator, 4 to 7 years, BFSI domain exp.(Investment banking/Capital Market/Wealth Management) is a must.

Skills & tools needed:

• Agile exp. and knowledge, end to end testing, UAT, regression, automation test frameworks.

Testing tools: JIRA, ALM

• Hands-on experience on test planning/test strategy, defect validation, sending status reports