ICT Infrastructure Security Auditor (Senior / Lead)

Role overview

We are hiring an ICT Infrastructure Security Auditor to lead hands-on audits, VAPT and hardening reviews for government and enterprise clients.

Key responsibilities

1. Plan and execute ICT infrastructure security audits for client environments of 100500+ endpoints, from scoping to closure.

2. Perform infrastructure VAPT on network devices, security appliances, servers and endpoints.

3. Review firewall rule bases, access control lists, VPN configurations and administrative access paths for weaknesses and policy gaps.

4. Conduct configuration reviews against CIS Benchmarks and client hardening baselines for switches, routers, firewalls, Windows/Linux servers and endpoints.

5. Validate scanner output manually, remove false positives and confirm exploitability before reporting a finding.

6. Rate findings by risk and write clear, actionable recommendations for remediation teams.

7. Prepare audit reports aligned to CERT-In and client requirements, and present findings to client IT and management.

8. Recommend and, where in scope, help implement hardening measures; verify fixes in re-audits.

9. Maintain working papers, evidence and checklists to audit quality standards.

10. Guide junior auditors on methodology and finding validation.

Required skills and experience

ICT infrastructure audit experience

• Hands-on participation in at least 1520 ICT infrastructure security audits.
• Able to explain, for each audit, personal responsibilities, assessment methods used, key findings and recommendations made.
• Practical experience assessing environments of about 100–500 endpoints or larger, including infrastructure hardening reviews.

Core networking knowledge

• Practical understanding of firewall policies and rule-base review.
• Access control lists on routers, switches and firewalls.
• VPN connectivity (site-to-site and remote access) and its secure configuration.
• Secure administrative access: management plane isolation, jump hosts, MFA, SSH/HTTPS, privileged account control.

Infrastructure VAPT and hardening

• Hands-on assessment of network devices, security appliances, servers and endpoints.
• Working knowledge of CIS Benchmarks and configuration-based security assessments.
• Experience reviewing or implementing hardening for switches, firewalls, servers and endpoints.
• Ability to tell a scanner-generated observation apart from a validated security finding, with evidence to support it.
• Familiarity with tools such as Nessus, Qualys or OpenVAS, Nmap, Nipper, CIS-CAT and Wireshark.

Qualifications and how to apply

A B.E./B.Tech, MCA or M.Sc. in Computer Science, IT or Electronics is required; relevant certifications are a strong plus.

• Preferred certifications: CISA, ISO/IEC 27001 Lead Auditor, CEH, OSCP, CCNA/CCNP Security or CompTIA Security+.
• Exposure to CERT-In audit guidelines and government or PSU client environments is preferred.
• Strong report writing and client communication in English and Hindi.
• Willingness to travel to client sites across India.