▷ Urgent Search! Penetration Tester

ISA is a premier technology solution provider for the Aviation industry. We are backed by Air Arabia and headquartered in Sharjah, UAE, while the Research and Development center is located in Colombo, Sri Lanka and Pune, India. We are a 100% owned subsidiary of Air Arabia

Location : Pune

https : / / isa.ae /

Address : Smartworks Building, Nexa Soft, Core Ops,5th Floor, 43EQ, Survey No 44, PLOT A, H. No. 8 / 1 (P, opp. Opp. Ravindranath Tagore School of Excellence, Balewadi, Pune, Maharashtra 411045

Job Title : Security Engineer (Penetration Tester)

Job Type : Full-time

Reports To : Security Architect

Job Overview :

We are seeking a highly skilled Security Engineer to design, implement, and manage the security architecture of our organization. The ideal candidate will be responsible for firewall and endpoint security, WAF implementation, VAPT, fraud investigation, dark web monitoring, brand monitoring, email security, and compliance enforcement. The role requires expertise in securing IT infrastructure, conducting risk assessments, ensuring compliance, and implementing Microsoft security layers to strengthen the organization's security posture.

Key Responsibilities :

1. Firewall, Endpoint & WAF Security

• Design, configure, and manage firewalls (Palo Alto, Fortinet, Cisco ASA, Check Point).
• Deploy and maintain Web Application Firewalls (WAF) for web security (Cloudflare, Imperva, AWS WAF).
• Implement Endpoint Detection & Response (EDR) solutions like Microsoft Defender for Endpoint, CrowdStrike, SentinelOne.
• Conduct regular firewall rule audits, optimize configurations, and enforce Zero Trust principles.

2. Microsoft Security Layer Implementation

a. Microsoft Email Security

b. Microsoft Endpoint Security

c. Compliance & Risk Management

3. Dark Web Monitoring & Brand Protection

4. Fraudulent Incident Investigation & Threat Hunting

5. VAPT & IT Security Operations

6. IT Security & Compliance Management

Required Qualifications & Skills :

Technical Skills :

Firewall & Network Security : Palo Alto, Fortinet, Cisco ASA, Check Point

Microsoft Security Stack : Defender for Endpoint, Defender for Office 365, Intune, Purview Compliance

Endpoint Security & EDR : Microsoft Defender, CrowdStrike, SentinelOne

WAF & Web Security : Imperva, AWS WAF, Akamai, Cloudflare

VAPT & Red Teaming : Burp Suite, Nessus, Metasploit, Kali Linux, OWASP ZAP

SIEM & Threat Intelligence : Microsoft Sentinel, Splunk, QRadar, ELK Stack, MITRE ATT&CK

Cloud Security : Azure Security Center, AWS Security Hub, GCP Security Command Center

IAM & Zero Trust : Okta, Microsoft Entra ID, Conditional Access Policies, PAM

Dark Web & Brand Monitoring : Recorded Future, Digital Shadows, Microsoft Defender Threat Intelligence

Soft Skills :

Certifications (Preferred, but not mandatory) :

CISSP – Certified Information Systems Security Professional

CEH – Certified Ethical Hacker

OSCP – Offensive Security Certified Professional

CISM / CISA – Certified Information Security Manager / Auditor

Microsoft Certified : Cybersecurity Architect (SC-100)

Microsoft Certified : Security Operations Analyst (SC-200)

Microsoft Certified : Information Protection Administrator (SC-400)

Experience Required :

5+ years of experience in IT Security, Cybersecurity, and Threat Intelligence.

Hands-on expertise in firewall management, endpoint security, WAF, email security, and compliance.

Strong experience in fraud investigation, dark web monitoring, and brand protection.

Proven ability to secure cloud, hybrid, and on-premise environments.

Please send resumes to careers@isa.ae