11+ Ethical Hacking Jobs in Delhi, NCR and Gurgaon | Ethical Hacking Job openings in Delhi, NCR and Gurgaon

About the Role 

We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership. 

Key Responsibilities 

VAPT & Red Team Operations 

• Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure. 
• Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized. 
• Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs). 
• Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments. 
• Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements. 
• Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems. 
• Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks. 
• Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance. 
• Re-test remediated findings and track closure with engineering and IT teams through to verification. 

ISO Compliance & Governance 

• Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans. 
• Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301. 
• Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators. 
• Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation. 
• Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle. 
• Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable. 
• Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates. 
• Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training. 
• Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring. 
• Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps). 

Incident Response & Continuous Improvement 

• Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews. 
• Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises. 
• Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements. 

Required Qualifications 

• 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits. 
• Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments. 
• Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK. 
• Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP. 
• Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust). 
• Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end. 
• Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301. 
• Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths. 
• Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk. 
• Strong report-writing, policy-drafting, and executive communication skills. 
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). 

Preferred Qualifications 

• Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical. 
• Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC. 
• Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer). 
• Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools. 
• Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques. 
• Experience with container, Kubernetes, and serverless security testing. 
• Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS. 
• Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust). 
• Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure. 
• Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy. 

If you love interacting with high-net worth people, and maintaining strong long-term relationships, this is the position for you!

The WH/TL is a dynamic professional with experience in Business Development, Portfolio Management & Client Relationship Management in the Financial Services sector. (S)he would be responsible for driving teams to exceed sales targets and client relationship management by delivering the best standards of services.(S)he would be helping the teams to establish strong ties with them by designing & implementing their financial plans; and then by ensuring that they receive and execute on the right advice. (S)he would be a business manager as he would be responsible for P&L of his team.

 Wealth Management, Financial Services, Broking

 Responsible for development and management of respective zone teams, comprising Team Leaders, RMS

Responsibilities:

 Handling a team of Wealth Managers and planning and achieving Sales Targets for Wealth Management products through the team by motivating, Inspiring and providing guidance to the team to keep the performance levels high

 Maintaining profitability targets by ensuring good IRR and cross sell

 Identifying streams for revenue growth & developing business plans to build consumer preference

 Responsible for creation a client base in direct equity by acquiring new Private Wealth / HNI Clients / Corporate clients by interacting & developing rapport with all external/internal constituents of client at all levels; for maximum client retention & achievement of revenues

 Monitoring client’s portfolio performance and rendering sustained advisory services for securing high ROI

 Proven track record of establishing systems/ procedures, thereby contributing in a major way towards augmented growth and profitability level

 Fulfilling the compliance standards in Financial Planning, Asset Allocation and Product Sales and managing Delinquencies by ensuring proper Sales Process

 Recruiting, training and ensuring seamless induction to the newly joined team members and managing attrition within the team

 To ensure achievement of acquisition ,activation and other Cross sell targets .To also ensure achievement of sub targets within acquisition with a special focus on Premium segment customers

 To ensure achievement of business and revenue targets attributed for the company.

 Conduct performance reviews for effective monitoring and measuring of results.

Qualifications: Graduate/ MBA/PGDM in Finance

Hi

About Company

Our client is a community-based marketplace for global wellness entrepreneurs (both in services and products) and consumers. They provide platform and technology to enable sustainable & holistic wellness professionals to be successful. For the consumers, they create health awareness through our enriching content and help them reach their health goals through our world-class Experts, tools, programs and products.

Role: Mobile Developer

Location: Noida (in office)

•       Experience in building complex applications using Flutter (preferred) or using similar mobile frameworks

•       2+ years’ experience in mobile application development

•       Knowledge AWS/cloud hosting

•       CI/CD development/deployment practices

.        Working with Docker containers

•       Modern software design practices

•       Secure coding best practices

•       Best practice knowledge of API development

•       Strong development testing knowledge - Unit testing, test automation

Bonus if you have:

•       Experience with platform channels or writing Flutter plugins to interact with native APIs

•       Back End C# .NET/ .Net Core

•       MS SQL experience

•       Experience with microservice architectures

Regards

Team Merito

WORF FROM OFFICE!

Location : Noida/Chennai

Skill : Dot Net Developer            

§ Develop and support applications through all phases of the project life cycle, including Design, Development, Testing Support and Release Support

§ Having good hands-on experience in C#, .Net platform, MVC, SQL, PL/SQL

§ Required to develop applications using C# and .Net platform

§ Required to work independently with the customer and engage well with them

§ Good understanding of design principles and Object oriented programming

§ Develop Low level design documents

§ Responsible for coding, Developing test cases, unit testing and performing integration testing

§ Adhering to the schedule and scope of the project

§ Ensure to follow Technology and Process standards set for the project

§ Produce high quality technical deliverables for the customer

§ Interact with project lead to review Technical deliverables, Test cases and Test results

• Provide status updates to Project Manager

§ 4+ years of experience in Developing the applications/product using C# and .Net in Banking domain

§ Should have passion for technology and possess good learning skills

§ Should have Expertise in Classes, Session management, MVC, Paging, Java Script, JQuery, Web Application

§ Must be strong in OOPs Concepts and common design patterns

§ Should be experienced and have good knowledge in SQL, PL/SQL

§ Should possess excellent communication skills

§ Should possess excellent de-bugging, troubleshooting and problem solving skills

§ Should possess good client interaction skills and should be able to work independently with the client

• Should be proactive and self-initiated.

Job Brief

Primary Responsibilities:

• Obtaining in-depth understanding of design and implementation of existing software product
• Performing all phases of software engineering including requirements analysis, design, estimation, and development & testing
• Applying innovation and creativity in design and implementation of features
• Designing reusable components, frameworks and libraries
• Troubleshooting production support issues post-deployment and come up with solutions as required
• Follow the processes defined by the project manager and the organization

General Requirements

• 2+ years of experience in full-stack development in python based technologies.
• Experienced in relational database technologies
• Good in data structures and algorithms
• Good written and verbal communication skills
• Self motivated and willing to learn new technologies
• Experience in AWS cloud technologies is plus

Technologies

• Python, Django
• Angular
• JavaScript, HTML, CSS  technologies
• Must understand AJAX and REST

Learn from the best: Learn from leaders who have built Comm100 from ground up. Work under other engineers who handle different layers of the infrastructure.

Work in a data-driven team: Understand the importance of validating assumptions about user behaviour. Use various types of testing to ensure we're right (or discover where did we go wrong). Utilize data collection, enrichment, analytics, and visualizations to improve our systems.

WHO YOU ARE

To be successful in this role, you'll need to have the following skills:

Love for coding: A fanatic about writing beautiful and scalable code.

Sense of analytics: Strong analytical and troubleshooting skills. Should be resourceful, innovative, and inventive.

Dynamic: Should be comfortable in dealing with lots of moving pieces. Have exquisite attention to detail and are comfortable learning new technologies and systems.

Team player: Knack for influencing without being authoritative. Pitch in wherever the team needs help, from writing blog posts to supporting customers.

Accountability: High sense of ownership for your code and relentlessness to deliver projects with high business impact.

KEY SKILLS

• Strong computer system analysis and design skills in current methodologies and patterns including vanilla JavaScript,
• Rich experience with ReactJS, Redux, React Native, or similar library/tools.
• Obsessed with WPO (Web Performance Optimization) and web/mobile performance analysis.
• Familiar with web security, SEO, accessibility, and internationalization.
• Experience with W3C standards, HTTP protocol and web browsers.
• Experience with common tools such as front-end compilation, construction, testing, etc. (Babel, Rollup, Webpack, Jasmine, etc.)