Cyber Security Engineer

WE RE HIRING! Position: Cyber Security Engineer Location: Delhi Core Technical Skills Security Testing Tools Burp Suite, MobSF, SQLMap, Nmap, Nessus, Shodan Security Domains Web and Android Application, Network, and API VAPT; Bug Bounty Testing Methodologies OWASP Testing Guide, OWASP Top 10, Black-box & Grey-box Testing Vulnerability Management CVSS Scoring, Risk Rating, Remediation Guidance, Security Reporting Scripting & Automation Python, Shell Scripting Web Technologies HTML, JavaScript, Node.js (for testing purposes) Security Frameworks ISO 27001, GDPR, PCI DSS Security Controls Firewalls, Web Application Firewall (WAF) Version Control Git, GitHub Key Responsibilities Security Testing & Vulnerability Management Perform Vulnerability Assessment and Penetration Testing (VAPT) across web applications, Android applications, networks, and APIs. Conduct black-box and grey-box testing aligned with the OWASP Testing Guide and OWASP Top 10. Use tools such as Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan to identify and validate vulnerabilities. Score and prioritize findings using CVSS, assign risk ratings, and provide clear, actionable remediation guidance.Prepare detailed security reports and communicate findings to technical and non-technical stakeholders. Contribute to and support bug bounty program triage and validation. Write and maintain Python or shell scripts to automate recurring testing and reporting tasks. Security Operations & Incident Response Become proficient in security tools across network, cloud, email, threat detection and response, and compliance disciplines. Analyze, follow up, and directly remediate the ticket queue of suspicious or malicious events (SIEM, email security tools, network security tools, etc.). Follow up on the ticket queue of internal IT requests and approvals. Respond to security-related communications from users, vendors, and sponsors, including threats reported by users, vendor breach notifications, and verification of the safety of files or emails. Maintain the informational assets database and coordinate the review process to ensure appropriate permission levels for those assets. Perform security audits to confirm that policies and procedures are being followed. Governance, Research & Collaboration Research and prepare write-ups on complex technical topics, vendor proposals, and company policy recommendations. Assist Information Security Engineers on enterprise-wide projects, including deploying security technologies, supporting compliance requests, and collaborating with other IT teams. Support alignment with security frameworks such as ISO 27001, GDPR, and PCI DSS, and maintain awareness of firewall and WAF controls. Use Git/GitHub for version control of scripts, tools, and documentation.

Desired Candidate Profile

Bachelor s degree, preferably in Information Technology, Computer Science, or a related field. Experience 3-6 years Prior internship, co-op, or work experience within Information Security or a related security role. Practical exposure to Security Testing Tools including Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan. Understanding of OWASP Testing Guide, OWASP Top 10, and black-box/grey-box testing methodologies. Working experience with, or knowledge of, some of the following: SIEM, Endpoint Detection & Response (EDR), cloud-based architecture (e.g., Azure), Privileged Access Management/Identity Access Management, and Active Directory. Fundamental scripting skills in Python and/or PowerShell/Shell scripting. Working knowledge of HTML, JavaScript, and Node.js as they relate to application security testing. Exceptional communication skills, strong analytical thinking, and the ability to work well within small teams. Strong organizational skills with the ability to prioritize multiple projects simultaneously.