Cyber Security Engineer

Role Summary

Security professional with hands\-on experience in **Vulnerability Assessment and Penetration Testing (VAPT)**, responsible for identifying, analyzing, and mitigating security risks across web, mobile, API, and network environments. Skilled in delivering secure solutions and managing vulnerability lifecycles.

Key Responsibilities

• Play a key role in delivering **Security Penetration Testing** and **Vulnerability Management** services
• Conduct security assessments by scanning applications and networks, followed by manual exploitation
• Perform **Web Application Security Testing**, including SAST and DAST methodologies
• Execute **Mobile Application Security Testing** using tools like MobSF
• Conduct **API Security Testing** using Postman and Burp Suite
• Establish and manage a **Vulnerability Management Framework**, including:
• Vulnerability identification and assessment
• Risk treatment and remediation
• Exception handling and acceptance
• Ensure all new and existing applications undergo VAPT and security configuration assessments before and after deployment
• Track and maintain security coverage for newly deployed assets and applications
• Manage VAPT processes and **Secure Configuration Management**
• Collaborate with stakeholders to gather requirements through workshops, meetings, and process modeling

Skills \& Technical Expertise

• Strong understanding of OWASP Top 10, CIS benchmarks, and NIST frameworks
• Hands\-on experience with manual penetration testing and automated security tools
• Knowledge of programming/scripting languages such as Java, Python, or Ruby
• Experience in:
• Web, Mobile, and API security testing
• Security configuration assessments
• Strong analytical, problem\-solving, and communication skills

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, Business Administration, or related field
• 1–2 years of hands\-on experience in VAPT or cybersecurity
• Ability to identify and exploit vulnerabilities in real\-world environments
• Experience in end\-to\-end vulnerability management lifecycle
• Strong collaboration with development and business teams
• Certifications (preferred):
• CompTIA Security\+,CEH ,CISSP

Pay: ₹30,000\.00 \- ₹70,000\.00 per month

Work Location: Hybrid remote in Mohali, Punjab