11+ XAML Jobs in Delhi, NCR and Gurgaon | XAML Job openings in Delhi, NCR and Gurgaon

About the Role 

We are seeking an experienced Cyber Security Specialist who can operate across both offensive and defensive security disciplines. This dual-role professional will lead Vulnerability Assessment and Penetration Testing (VAPT) engagements, act as the in-house Red Team to simulate real-world adversaries, and own the implementation and continuous improvement of the Information Security Management System (ISMS) aligned with ISO/IEC 27001 and related standards. You will combine hands-on offensive security work with governance, audit readiness, and stakeholder engagement across engineering, IT, legal, and executive leadership. 

Key Responsibilities 

VAPT & Red Team Operations 

• Plan, scope, and execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, mobile apps, APIs, networks, cloud environments, wireless, and physical infrastructure. 
• Act as the organization's in-house Red Team, simulating advanced persistent threat (APT) actors through adversary emulation, social engineering, phishing campaigns, and physical intrusion testing where authorized. 
• Design and execute Red Team operations aligned with MITRE ATT&CK, TIBER-EU, and similar frameworks; develop custom Tactics, Techniques, and Procedures (TTPs). 
• Conduct manual and automated exploitation, post-exploitation, lateral movement, privilege escalation, and persistence testing in production-like environments. 
• Develop custom exploits, payloads, scripts, and tooling (Python, PowerShell, Bash, C/C++, Go) to bypass security controls during sanctioned engagements. 
• Perform source code reviews, threat modeling, and secure architecture reviews of new and existing systems. 
• Coordinate Purple Team exercises with the Blue Team / SOC to validate detection coverage and improve defensive playbooks. 
• Produce high-quality VAPT and Red Team reports with executive summaries, technical findings, proof-of-concept exploits, risk ratings (CVSS), and prioritized remediation guidance. 
• Re-test remediated findings and track closure with engineering and IT teams through to verification. 

ISO Compliance & Governance 

• Lead the implementation, maintenance, and continual improvement of the ISMS in line with ISO/IEC 27001:2022, including scope definition, Statement of Applicability (SoA), and risk treatment plans. 
• Own and maintain ISO policies, procedures, controls, and documentation across the organization, ensuring alignment with ISO 27001, ISO 27017, ISO 27018, and ISO 22301. 
• Plan and coordinate internal and external audits; serve as the primary liaison with certification bodies, auditors, and regulators. 
• Conduct risk assessments, business impact analyses (BIA), and threat modeling; maintain a central risk register and drive remediation. 
• Map VAPT and Red Team findings to ISO 27001 Annex A controls and feed results into the risk management lifecycle. 
• Support compliance with adjacent frameworks: SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and DPDP Act (India), as applicable. 
• Define and report security and compliance KPIs/KRIs to senior leadership; prepare materials for management reviews and board updates. 
• Develop and deliver security awareness training, phishing simulations, and role-based secure-coding training. 
• Drive third-party / vendor risk management, including security questionnaires, contractual clauses, and ongoing monitoring. 
• Partner with engineering and DevOps to embed security into the SDLC, CI/CD pipelines, and cloud architectures (DevSecOps). 

Incident Response & Continuous Improvement 

• Support incident response activities: detection, triage, containment, eradication, recovery, and post-incident reviews. 
• Maintain business continuity and disaster recovery plans; coordinate BCP/DR testing and tabletop exercises. 
• Stay current on emerging threats, CVEs, attacker techniques, regulatory changes, and ISO standard updates; recommend and drive improvements. 

Required Qualifications 

• 8+ years of progressive experience in cyber security, with at least 4 years in hands-on offensive security (VAPT, penetration testing, or Red Team) and 3+ years in ISO 27001 implementation and audits. 
• Proven track record of leading VAPT engagements across web, mobile, API, network, cloud (AWS / Azure / GCP), and wireless environments. 
• Hands-on experience executing Red Team operations and adversary emulation aligned with MITRE ATT&CK. 
• Deep proficiency with offensive security tooling: Burp Suite Pro, Metasploit, Cobalt Strike (or open-source equivalents like Sliver, Mythic, Havoc), Nmap, Nessus, Nuclei, BloodHound, Impacket, Responder, and OWASP ZAP. 
• Strong scripting and exploit development skills in Python, PowerShell, Bash, and at least one compiled language (C/C++, Go, or Rust). 
• Proven hands-on experience leading an organization through ISO 27001 certification and surveillance audits end-to-end. 
• Strong working knowledge of ISO/IEC 27001:2022 (including Annex A controls), ISO 27002, ISO 27017, ISO 27018, and ISO 22301. 
• Solid understanding of security domains: IAM, network security, endpoint security, cloud security, application security (OWASP Top 10, API Security Top 10), and Active Directory attack paths. 
• Experience with risk assessment methodologies (ISO 27005, NIST 800-30) and the ability to translate offensive findings into business risk. 
• Strong report-writing, policy-drafting, and executive communication skills. 
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience). 

Preferred Qualifications 

• Offensive security certifications: OSCP, OSEP, OSWE, OSED, CRTO, CRTP, CRTE, CRTL, GPEN, GXPN, GWAPT, or CEH Practical. 
• Governance certifications: ISO 27001 Lead Implementer and/or Lead Auditor, CISSP, CISM, CISA, or CRISC. 
• Cloud security certifications (CCSP, AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer). 
• Published CVEs, security research, bug bounty achievements, or contributions to open-source security tools. 
• Experience with Active Directory / Entra ID red teaming, Kerberos attacks, and modern EDR/XDR evasion techniques. 
• Experience with container, Kubernetes, and serverless security testing. 
• Experience implementing or auditing additional frameworks: SOC 2 Type II, NIST CSF, NIST 800-53, HITRUST, or PCI-DSS. 
• Experience with GRC platforms (Vanta, Drata, Sprinto, ServiceNow GRC, Archer, OneTrust). 
• Experience in regulated industries: financial services, healthcare, SaaS, or critical infrastructure. 
• Experience briefing executive leadership, customers, and external auditors on offensive findings and remediation strategy. 

Responsibilities:

Developing engaging social media strategies.

Managing social media platforms of the organization.

Scheduling social media posts.

Engaging followers with regular company updates.

Creating brand awareness to gain audience attention.

Overseeing Social Media teamwork.

Responding to the comments on social media on time.

Creating paid social media campaigns for advertising.

Monitoring social media metrics and ROI.

Analyzing social media trends.

Assisting the HR department with hiring and training new employees.

Preparing social media engagement and activities reports.

Optimizing social media content effectively.

Coordinating with Graphic Designer and other team members.

Staying up to date with the latest social media advertising efforts and goals.

Requirements:

Prover work experience as a Social Media Analyst, Social Media Strategist, Social Media Executive, or a similar position.

Excellent knowledge of research requirements for social media strategy.

Strong oral and written communication skills.

Ability to work for long periods of time as and when required.

Outstanding brand awareness experience will be preferred.

Any graduate with expert convincing skills.

Job Description:

The candidate should have an Engineering or BSc degree or/and relevant certifications from a reputable institute with 2-16 years of experience. He should be able to work independently and deliver results on schedule. He/She should have good team player skills to collaborate and lead, and share knowledge with others.

The candidate should be interested for a long term stable career to grow with our company and willing to work in 1 PM - 10 PM shift.

.          Should have delivered successful end-to-end development to deployment experience on Web applications and Api’sin last 3-6 years.

.           Must have good experience in Dot net core, MVC, C#, web api, Angular 2+ versions, HTML, CSS, OOPS.

• Experience in MySQL is a must and added advantage to have knowledge of NOSQL database.
• Extensive experience in writing rest full API
• Experience in using version controls such as GIT, Continuous Integration, Continuous Delivery
• Good to have experience in testing and debugging new programs using Firebug, Fiddler, Insomnia, and Postman Developer tools.
• Good in implementing the business rules in different layers like UI, services, and database.
• Should have 2-4 years’ experience in backend development
• Experience in service-based development using technologies such as Web API and RESTful services. 
• Proficient in S/W Development life cycle, Database Designing, and Database creation. 
• Proficient in writing clean, well-structured code with proper abstraction and reusability.

.         Ability to work to tight deadlines, manage priorities, and take responsibility for delivering to time and quality requirements.

.         Excellent Communication Skills

  Company Profile:

i2k2 Networks is a trusted name in the IT cloud hosting services industry. We help enterprises with cloud migration, cost optimization, support, and fully managed services which helps them to move faster and scale with lower IT costs. i2k2 Networks offers a complete range of cutting-edge solution that drives the Internet-powered business modules. We excel in:

  - Managed IT Services

  - Dedicated Web Servers Hosting

  - Cloud Solutions

  - Email Solutions

  - Enterprise Services

  - Round the clock Technical Support

i2k2 Networks Pvt Ltd.

• Designing emailers, social media (LinkedIn, Facebook, Instagram) posts
• Creating blog headers and blog images
• Working with content creator and content writer to plan and deliver the weekly tasks
• Coming up with creative ways to showcase the message given by content writers and creators
• High-quality and attention-grabbing images that grab the users’ attention and improving the brand’s credibility
• Visually compelling infographics that present valuable information about the company in a compelling way
• Quoting graphics that reflect the vision and message of the brand, enabling followers to relate and build a relationship with the business
• Being the single point of contact for all the graphic design needs in the product

Desired Candidate Profile

• Minimum 1-2 years of experience in graphic designing using various tools
• Hands on experience in Adobe Illustrator, Photoshop
• Hands on experience in various tools (After effects, Premiere pro)
• Ability to work methodically and meet deadlines
• Portfolio of illustrations or other graphics
• Excellent communication skills
• Ability to design and develop graphics and various graphical content to connect with the audiences that are most relevant to us, in a way that’s relevant for them and ensuring the communication is specific and meaningful
• Abilities to balance the WOW (be noticed), HOW (engage and educate) and NOW (drive action) of content marketing
• An undistracted mind, an aspiration for holistic growth, humility, discipline, clear and adequate communication and self confidence to learn and do anything    

Required Skills:

• 2+ years experience developing software using PaaS/APIs, Java, Docker, Bash, Json, Node js, sql / postgres, RestAPI, Swagger.
• Java 8 / Tomcat 8.5 / Jersey REST
• Spring MVC/Spring Boot/Microservices
• Hibernate
• Strong desire to learn
• Knowledge of cutting-edge technologies.
• Basic understanding of design patterns
• Comfortable working with Subversion, Git, or similar source control environments
• Must be willing to do Test Driven Development.
• Strong communication skills, must embrace working in a highly-collaborative environment

Preferred Skills:

• Good understanding of web-service technologies, Restful APIs
• Some exposure to a version control system such as Git or Subversion
• Proven understanding of software development techniques, concepts and processes
• Driven and self-motivated.
• Works creatively to solve challenging problems