About the job

Company Description ISECURION is a CERT-In empanelled and ISO 27001:2022 certified cybersecurity consulting company that helps organizations stay secure in an increasingly complex digital environment. The team focuses on strengthening security posture, meeting compliance requirements, and building long-term cyber resilience for businesses. ISECURION delivers a broad range of services, including VAPT, compliance audits, cloud security, DFIR, risk assessments, and managed security services, working closely with clients to identify gaps and reduce risk.

The company is known for its practical, business-focused approach that prioritizes remediation and alignment with industry best practices and regulatory standards. A passionate team, driven by research, innovation, and meaningful security outcomes, forms the core of ISECURION’s culture.

Role Description We are looking for a seasoned Cyber Security Practice Head with 10–12 Years of Experience(Full-time) to lead the technical direction, service delivery, and capability growth of ISECURION'S cybersecurity practice, spanning VAPT, Red Team operations, GRC, SOC/MDR, security advisory, and product development. The ideal candidate will combine deep technical and governance expertise with strong leadership, ensuring high-quality, consistent delivery, building a strong team and service portfolio, and supporting customer engagements and business growth.

Key Responsibilities:

Practice Leadership & Strategy

- Define the vision, roadmap, and service portfolio for the cybersecurity practice in line with business goals
- Own practice-level delivery, quality, utilization, and profitability
- Introduce new service offerings and solution accelerators based on market demand and emerging threats

Service Delivery & Quality Assurance

- Oversee delivery of VAPT (network, web, mobile, API, cloud) and security audits
- Oversee GRC engagements, including ISO 27001, SOC 2, PCI DSS, NIST CSF, and data protection compliance
- Establish and maintain standard methodologies, checklists, and report templates aligned to OWASP, PTES, MITRE ATTACK, and CERT-In guidelines
- Review critical deliverables and reports to ensure technical accuracy, clarity, and customer-ready quality
- Ensure timely delivery, scope adherence,



and effective management of escalations

Red Team Operations

- Lead and oversee the Red Team, covering adversary simulation, assumed-breach exercises, social engineering, and purple-team engagements
- Ensure engagements are planned and executed with clear rules of engagement,

written customer authorization, and safe handling of access and data
- Align red team tradecraft and reporting to MITRE ATTACK and recognized industry methodologies
- Drive continuous development of red team tooling, techniques, and research capability
- Review red team findings and reports to ensure technical depth, accuracy, and actionable recommendations

Product Team Leadership

- Provide strategic and technical leadership to the Product Team for ISECURION'S cybersecurity products, platforms, and solution accelerators
- Define the product vision and roadmap in line with market demand, customer feedback, and the practices service portfolio
- Oversee the product development lifecycle, including requirements, secure development practices, testing, release, and support
- Ensure product quality, security, and documentation meet customer and compliance expectations
- Work with sales, pre-sales, and delivery teams on product positioning, demos, and go-

to-market

Customer & Pre-Sales Engagement

- Act as the senior technical authority in customer meetings, CXO/CISO discussions, and solution presentations
- Support sales and pre-sales teams with technical scoping, solution design, proposals,

and RFP/tender responses
- Build trust with key accounts through advisory, thought leadership, and consistent delivery

Team Building & Capability Development

- Lead, mentor, and grow a team of team leads, security analysts, red team operators,

consultants, auditors, and product engineers
- Define roles, KRAs/KPIs, and career paths; drive performance reviews and talent development




- Support hiring, interviewing, and onboarding of technical talent in coordination with

HR
- Drive training, certifications, research, and knowledge-sharing within the practice

Governance, Risk & Compliance Within the Practice

- Ensure delivery practices comply with company policies, client NDAs, and data confidentiality requirements
- Maintain the practices alignment with CERT-In empanelment and audit requirements
- Ensure secure handling of client data, testing artifacts, and findings

Required Skills & Qualifications:

- Bachelor's degree in Engineering, Computer Science, Information Security, or equivalent; Master's degree preferred
- 10–12 years of experience in cybersecurity, with at least 4 years in a leadership or practice/delivery-head role
- Strong hands-on and conceptual expertise in VAPT, application and infrastructure security, and cloud security
- Hands-on understanding of red teaming, adversary emulation, and offensive security tradecraft
- Experience leading or working closely with a product or engineering team, including roadmap ownership and secure software development practices
- In-depth knowledge of GRC and frameworks: ISO 27001, SOC 2, PCI DSS, NIST CSF, and data protection laws such as the DPDP Act
- Good understanding of SOC / MDR / SIEM, incident response, and threat detection
- Proven experience managing and scaling technical teams and consulting engagements
- Solid customer-facing, presentation, and report-review skills
- Excellent leadership, decision-making, and problem-solving abilities

Certifications Preferred

- Certifications such as CISSP, CISM, CISA, OSCP, OSEP, CRTO, CEH, ISO 27001 Lead

Auditor, or equivalent
- Experience in a CERT-In empanelled or comparable cybersecurity consulting firm
- Exposure to BFSI, healthcare, government, and large enterprise environments
- Experience in pre-sales, solutioning, and tender/RFP responses

HOW TO APPLY

Interested candidates are requested to send their updated resume with the subject line "Cyber Security Practice Head — Immediate Joiner" to [email protected]. Only candidates available for immediate joining and willing to work at the Bengaluru will be considered.

📌 Cyber Security Practice Head (Bengaluru)
🏢 ISECURION
📍 Bengaluru