Information Security Manager

ZingHR | Mumbai | Work From Office

Experience: 8–12 Years

Employment Type: Full-time

About ZingHR

ZingHR is an AI-powered Human Capital Management (HCM) platform, empowering organizations to transform their HR operations through technology and innovation.

About the Role

We are looking for an experienced Information Security Manager with strong hands-on expertise in Cybersecurity, Red Team Operations, Offensive Security, Penetration Testing and Vulnerability Assessment.

The ideal candidate will be responsible for identifying security vulnerabilities, conducting adversary simulations, evaluating security controls and strengthening the organization's overall security posture across applications, infrastructure, networks and cloud environments.

Key Responsibilities

- Plan and execute Red Team engagements, adversary simulations and penetration testing exercises.
- Conduct security assessments across web applications, APIs, networks, internal infrastructure and cloud environments.
- Identify vulnerabilities, security misconfigurations, privilege escalation paths and potential attack vectors.
- Perform application security testing aligned with OWASP Top 10.
- Work with offensive security tools such as Burp Suite, Nmap, Metasploit and Kali Linux.
- Assess Active Directory, Identity and Access Management (IAM) and privilege management security.
- Collaborate with SOC, Blue Team, Incident Response and Security Engineering teams.
- Prepare technical assessment reports,



proof-of-concept evidence and remediation recommendations.
- Validate security fixes through retesting and vulnerability assessments.
- Stay updated on emerging cyber threats, attack techniques and the MITRE ATT&CK; framework.

Required Skills & Qualifications

- 8–12 years of overall experience in Cybersecurity / Information Security.
- Solid hands-on experience in Red Teaming, Offensive Security or Penetration Testing.
- Practical experience in Web Application, API, Network and Infrastructure Penetration Testing.
- Strong understanding of Active Directory security, privilege escalation and lateral movement.
- Scripting knowledge in Python, PowerShell or Bash.
- Familiarity with MITRE ATT&CK;, OWASP and penetration testing methodologies.
- Ability to translate technical vulnerabilities into business risks and actionable remediation plans.
- Excellent analytical, communication and stakeholder management skills.

Preferred Certifications

- OSCP or other advanced Offensive Security certifications.
- CREST (CRT/CCT).
- GIAC (GPEN/GWAPT).
- Relevant Cloud Security or Adversary Simulation certifications.

Ideal Candidate Profile

- Hands-on cybersecurity professionals with proven Red Team and Offensive Security experience.
- Ability to independently scope, execute and report security assessments.
- Experience in enterprise environments, SaaS platforms or cloud-based applications.
- Strong technical expertise combined with risk assessment and security control validation capabilities.

📌 Information Security Manager (Mumbai)
🏢 ZingHR
📍 Mumbai