{"id":1277324,"url":"https://alion.io/job/nopalcyber-team-lead-asr","title":"Team Lead - ASR","company":{"id":3806513,"name":"NopalCyber","domain":"nopalcyber.com","url":"https://alion.io/company/nopalcyber","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"C","score":64,"open_postings":15,"ghost_share":0.6,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Management","role_family":"Management","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Acunetix","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-14T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-24T15:06:59Z","board_verified":true,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":71},"description":"About NopalCyber NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Through Managed Extended Detection and Response (MXDR), Attack Surface Management (ASM), Breach and Attack Simulation (BAS), and Advisory Services, we fortify our clients’ cybersecurity across both offense and defence. Our AI-driven Nopal360° platform, NopalGo mobile app, and proprietary Cyber Intelligence Quotient (CIQ) enable organizations to quantify, track, and visualize their cybersecurity posture in real time. We democratize enterprise-grade security operations for organizations of all sizes by lowering the barrier to entry while raising the bar for security and service.Key\nResponsibilities Perform advanced Vulnerability Assessment and Penetration Testing (VAPT) across external infrastructure, internal networks, web and mobile applications, APIs, and cloud environments (AWS, Azure, GCP). Conduct CIS Benchmark-based hardening assessments and implementations across operating systems (Windows, Linux), databases, middleware, network devices, and cloud platforms. Deliver customized hardening guides and security baselines mapped to client-specific compliance requirements and regulatory frameworks. Execute Dynamic Application Security Testing (DAST) on web and API applications (both authenticated and unauthenticated) using enterprise-grade tools; analyze, validate, and prioritize findings with actionable remediation guidance. Run Breach and Attack Simulation (BAS) scenarios to test resilience against real-world adversary tactics, techniques, and procedures (TTPs). Prepare comprehensive technical reports and executive-level summaries highlighting vulnerabilities, attack paths, misconfigurations, and compliance gaps. Continuously research emerging attack vectors, zero-day vulnerabilities, DAST methodologies, and new CIS benchmark updates to refine assessment strategies. Contribute to Ransomware Resiliency Assessments (RRA) by simulating ransomware behaviors and evaluating control effectiveness. Required Skills & Experience 8-12 years of direct, hands-on cybersecurity consulting experience, with deep expertise in VAPT, CIS benchmarking, and application security testing (DAST). Proven track record performing end-to-end penetration tests and dynamic application security scans using industry tools such as Burp Suite Pro, OWASP ZAP, Nessus, Qualys, Netsparker, Acunetix, and custom scripts. Strong understanding of web application security flaws (OWASP Top 10, API security issues, authentication/authorization flaws, injection attacks, deserialization, SSRF, RCE, etc.) and ability to exploit and document them. Solid understanding of network protocols, operating system behaviors, and common application security principles relevant to modern IT environments. Hands-on experience with CIS Benchmark implementation and verification across diverse platforms, ensuring alignment with client compliance mandates. Familiarity with BAS tools and adversary emulation frameworks to measure detection and response maturity. Proficiency in scripting/automation (Python, PowerShell, Bash) to extend testing capabilities or validate findings. Working knowledge of security architecture frameworks (e.g., SABSA) and threat modeling methodologies (e.g., STRIDE, kill chains, attack trees) to support risk-informed vulnerability assessments, hardening efforts, and remediation planning. Ability to write and present detailed remediation reports, security recommendations, and compliance-aligned hardening outputs. Strong communication skills to convey technical findings to technical and executive stakeholders.\nPreferred\nQualifications Bachelor’s degree in engineering, Computer Science, or related discipline. CEH Certification (Mandatory) plus one or more advanced certifications: OSCP (Offensive Security Certified Professional) eCPPT (eLearn Security Certified Professional Penetration Tester) CompTIA Pentest+ CRTP / CRTE (Certified Red Team Professional/Expert) CIS-CAT Pro Assessor or equivalent CIS Benchmark credentials Familiarity with MITRE ATT&CK and adversary simulation frameworks.\nPreferred\nQualifications Self-starter and quick learner requiring minimal ramp-up Excellent written, oral, and interpersonal communication skills Highly self-motivated, self-directed, and attentive to detail Ability to effectively prioritize and execute tasks in a high-pressure environment Location: Nopal Cyber, Hyderabad (Work from Office, 5 Days a Week)\nEmployment Type: Full-time","description_format":"text","description_chars":4550,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-26T02:09:01Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.318,"p_room":0.28,"age_days":71,"expected_fill_days":30,"reasons":["conf:3","stale_co","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/nopalcyber-team-lead-asr","json_url":"https://alion.io/job/nopalcyber-team-lead-asr.json","meta":{"generated_at":"2026-10-24T18:45:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27356,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806513},"rest":"https://alion.io/mcp/rest/get_company?id=3806513"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnopalcyber-team-lead-asr"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnopalcyber-team-lead-asr"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnopalcyber-team-lead-asr"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nopalcyber-team-lead-asr\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnopalcyber-team-lead-asr"}]}