Security Engineer

Job description As a Security Engineer - VAPT, you will be responsible for conducting comprehensive security assessments, identifying vulnerabilities, and implementing effective remediation strategies. Leveraging your expertise in penetration testing and ethical hacking, you will play a key role in enhancing the security posture of our clients' systems and networks. This position offers an exciting opportunity to work on challenging projects, collaborate with talented professionals, and contribute to the advancement of cybersecurity practices. Key Responsibilities: • Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for Web Applications, Mobile Applications (iOS & Android), APIs, network infrastructure, and enterprise IT environments. • Conduct security assessments using industry-standard tools and methodologies, including Burp Suite, Nmap, Nessus, Metasploit, OWASP ZAP, MobSF, Frida, Drozer, Postman, and other security testing tools. • Perform Web Application Security Testing based on OWASP Top 10 guidelines. • Perform Mobile Application Security Testing (Android & iOS) based on OWASP Mobile Top 10, including static and dynamic analysis. • Perform API Security Testing based on the OWASP API Security Top 10, including authentication, authorization, business logic, and API misconfiguration testing. • Identify, validate, and exploit security vulnerabilities to determine their impact on business assets. • Prepare detailed assessment reports outlining findings, risk ratings, proof of concepts (PoCs), and remediation recommendations. • Collaborate with development and infrastructure teams to prioritize and remediate identified vulnerabilities. • Develop custom scripts and automate repetitive security testing tasks using Python, Bash, or PowerShell. • Participate in security validation, remediation verification, and re-testing activities. • Stay updated on emerging threats, CVEs, attack techniques, and industry best practices to continually improve testing methodologies. • Provide technical guidance and mentorship to junior security engineers and contribute to knowledge-sharing initiatives. Requirements: • Bachelor's degree in Computer Science, Information Technology, or related field. • 2–3 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) of Web Applications, Mobile Applications (iOS & Android), and APIs. Proficiency in using tools such as Nmap, Nessus, Metasploit, Burp Suite, and OWASP. • Hands-on experience with various operating systems, including Windows, Linux, and Unix. • Strong understanding of network protocols, web application architecture, and common security vulnerabilities. • Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or similar certifications preferred. • Excellent analytical skills and attention to detail, with the ability to prioritize and manage multiple tasks effectively. • Effective communication skills, both verbal and written, with the ability to convey technical concepts to non-technical stakeholders. • Proven track record of delivering high-quality security assessments and actionable recommendations. Show more