11+ Ethical Hacking Jobs in Delhi, NCR and Gurgaon | Ethical Hacking Job openings in Delhi, NCR and Gurgaon

About the Role 

We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership. 

Key Responsibilities 

VAPT & Red Team Operations 

• Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure. 
• Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized. 
• Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs). 
• Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments. 
• Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements. 
• Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems. 
• Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks. 
• Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance. 
• Re-test remediated findings and track closure with engineering and IT teams through to verification. 

ISO Compliance & Governance 

• Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans. 
• Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301. 
• Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators. 
• Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation. 
• Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle. 
• Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable. 
• Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates. 
• Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training. 
• Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring. 
• Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps). 

Incident Response & Continuous Improvement 

• Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews. 
• Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises. 
• Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements. 

Required Qualifications 

• 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits. 
• Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments. 
• Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK. 
• Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP. 
• Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust). 
• Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end. 
• Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301. 
• Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths. 
• Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk. 
• Strong report-writing, policy-drafting, and executive communication skills. 
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). 

Preferred Qualifications 

• Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical. 
• Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC. 
• Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer). 
• Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools. 
• Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques. 
• Experience with container, Kubernetes, and serverless security testing. 
• Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS. 
• Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust). 
• Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure. 
• Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy. 

Your Impact:

•                 Interact clearly with clients and the on-shore and off-shore project teams

•                 Regular involvement in thought leadership Best Practices development

•                 Facilitate end to end project design & development while working closely with global client

Your Skills & Experience:

•                 4 to 14 years of development experience in SFDC

•                 Excellent hands-on experience in Salesforce application development including VF, Apex Triggers, Asynchronous Apex

•                 Deep knowledge of Lightning framework

•                 Expertise in Business Requirement gathering, Analysis & conceptualizing high-level architectural framework & design

•                 Experience working with Sales or Service cloud, Community Cloud, Marketing Cloud

•                 Conceptualize end to end integration projects & knowledge of authentication mechanism

•                 Experience in REST & SOAP APIs, knowledge of Governor limits involved during Integration

•                 Working knowledge on continuous integration, working with repositories (e.g. Git)

•                 Should have experience to design the data flow and work with any ETL or dataloader

•                 Excellent experience in designing and architecting large scale applications

•                 Thorough understanding of Solution architecting & Estimation process

•                 Excellent consulting skills, oral and written communication, presentation, and analytical skills 

Set Yourself Apart With:

•                 Salesforce Certifications

•                 Knowledge of Heroku, Angular.js and Salesforce Einstein, Salesforce CPQ, CloudCraze B2B

•                 Incident and problem management skills

•                 Ability to provide necessary coaching to bring juniors up to speed on the technology

•                 Exceptional written skill for solution documentation creation for both technical and non-technical material

•                 Background in force.com platform and deployment experience in an outsourced service environment

•                 Articulation skills & Good team player

•                 Self-starter and self-learner with keen interest to grow

•                 Process orientation and the ability to define and setup processes

•                 Mentoring team members

Benefits of Working Here:

•                 Gender Neutral Policy

•                 18 paid holidays throughout the year for NCR/BLR (22 For Mumbai)

•                 Generous parental leave and new parent transition program

•                 Flexible work arrangements

•                 Employee Assistance Programs to help you in wellness and well being  

**About jhana**

jhana is an early-stage, seed-funded startup that builds intelligent practice tools for the

law across research, drafting, and document management. At jhana.ai, we are

transforming the legal industry with India’s first AI-driven Paralegal. Our product delivers

critical legal insights through advanced AI, producing outputs like redlines, memos, and

risk assessments to streamline workflows for legal teams. Recognized as the Best Legal

Tech Startup in Asia and Oceania by ALITA, we are on a mission to empower professionals

with technology that drives efficiency and excellence.

**Position Overview**

We are looking for an ambitious and strategic Senior Business Account Executive to lead 

and scale our sales efforts across Delhi, Mumbai and Chennai. A background in law is 

mandatory for this profile.This role is ideal for a sales "rodeo" or "hunter" who thrives on 

closing deals, establishing scalable sales processes, and creating an effective sales 

funnel from the ground up. The Senior Account Executive will be instrumental in setting 

up our sales processes, expanding the team, and ensuring our strategies align with 

jhana.ai’s growth goals. 

**The day-to-day**

● Process Development & Team Building: Establish and refine scalable sales processes to drive efficiency across the sales funnel, from lead generation to closure. Identify, recruit, and mentor a high-performing sales team as our operations expand.

● Pipeline & Funnel Management: Design and implement a structured sales funnel, optimizing each stage to improve conversion rates and ensure a predictable revenue pipeline.

● Sales Strategy & Execution: Execute a “hunter” approach to proactively source and close new business opportunities, setting an example as a top-performing salesperson within the team.

● Solution Selling: Tailor jhana.ai's value proposition to meet the unique needs of each client through consultative selling, presentations, and product demonstrations.

● Market & Industry Analysis: Keep a pulse on the legaltech landscape, client needs, and competitor activity to help shape product positioning, sales tactics, and go-to-market strategies.

● Collaboration with Cross-functional Teams: Coordinate with Marketing, Product, and Customer Success teams to ensure sales insights inform product development, marketing campaigns, and support strategies.

● Reporting & CRM Management: Maintain and report on key sales metrics, forecasts, and performance analytics in CRM systems, leveraging data to refine strategies and processes.

**Qualifications & Skills**



● Education: **** Bachelor’s degree in Law.**** A degree in business is preferred. 

● Experience: **** 5+ years of experience in legal ecosystem.**** 

● Good to have : **2-3 years of proven success in enterprise sales, preferably within 

legaltech, SaaS, or B2B technology sectors**, with a record of meeting or exceeding 

revenue targets. 

● Sales Hunter Mindset: Demonstrated ability to close deals and build processes that drive sustained growth; proactive and self-driven in sourcing and securing new clients.

● Process-Oriented Leader: Strong skills in setting up sales workflows, sales automation tools, and repeatable processes that support scale.

● Industry Knowledge: Familiarity with legal industry dynamics and AI-driven tech solutions for legal processes is an advantage.

● Analytical & Tech-savvy: Proficiency in CRM software (e.g., Salesforce, HubSpot) and an analytical approach to optimizing the sales funnel.

● Collaborative & Adaptable: Experience working within a startup or dynamic environment with the ability to adjust to rapid changes and new goals.

**Preferred Experience **

● Background in law or experience with legal clients. 

● Ability to quickly learn and apply sales strategies to meet or exceed client 

expectations. 

● Knowledge of CRM tools and interest in data-driven client management. 

**Additional Requirements **

 ** Travelling would be required**

● Travel: for client meetings and industry events. 

● Adaptability & Initiative: Positive attitude with a proactive approach to learning and 

client engagement.

**What We Offer**

● Competitive salary and commission structure

● A chance to be at the forefront of AI-driven legal technology

● Growth opportunities within a high-impact role, building and scaling the sales function

● A flexible work environment and the opportunity to shape the future of legaltech in India

Develops a purchasing strategy.

Reviews and processes purchase orders.

Manages other members of the purchasing team.

Maintains records of goods ordered and received.

Negotiates prices and contracts with suppliers.

Builds and maintains relationships with vendors.

Selects prospective vendors and negotiates contracts.

Evaluates vendors based on quality, timeliness, and price.

Schedules deliveries and ensures timely fulfillment of orders.

Researches and evaluates vendors to compare pricing and services.

Coordinates with fellow managers to monitor inventory and determine supply needs.

Ensures quality of procured items and addresses problems when they arise.

Keeps up with trends in procurement.

Travels to vendor locations.

Stays current with purchasing technology trends and oversees purchase and implementation, as necessary.

Responsibilities

• Develop our products front end
• Optimize applications for maximum speed
• Collaborate with back-enddevelopers and web designers to improve usability
• Stay up-to-date on emerging technologies

Requirements

• 4 to 6 years of work-experience as a Front-end developer
• Experience in developing front end applications at scale
• Strong knowledge and experience with JavaScript ,CSS, Angular,AJAX and jQuery,react,node
• Experience in CSS preprocessor (SASS/LESS/COMPASS), CSS framework – Bootstrap.
• In-depth understanding of the entire web development process
• Knowledge of Wordpress theme integration Template customization
• Able to Write code as Per W3 validation Rules, Cross browser, Cross Device, and SEO Friendly

Responsibilities:

• Write well designed, testable, scalable and efficient code and oversee assigned programs (e.g. conduct code review) and provide guidance to team members
• Apply design principles to ensure code modularity and error handling at appropriate levels
• Communicate software requirements to development teams
• Evaluate and select appropriate software or hardware and suggest integration methods
• Address technical concerns, ideas and suggestions and provide technological solution to it
• Monitor systems to ensure they meet both user needs and business goals
• Design the overall structure of the platform and oversee programs to ensure the proper implementation of the architecture

Desired Skills and Experience

• 2-7years of relevant experience in an online start-up with a record of substantial achievements

in the specific role

• Strong programming foundation in PHP, MySQL, Oops Concepts and can develop core PHP based applications
• Must have worked on MVC frameworks – Laravel, CodeIgniter, Cake PHP or Zend.
• Experience with JavaScript and jQuery for producing AJAX applications.
• HTML5, CSS3, XML knowledge is mandatory
• Ability to make modifications to the systems with little or no interruption of service
• Solid exposure to API integrations and familiar with various design & architectural patterns
• Understanding fundamental design principles behind a scalable application
• Ability to thrive in a fast-paced, deadline-driven environment