Cyber Security Engineer – Ethical Hacking & Application Security

Here’s a short but solid JD for the person who can help you build the cybersecurity vertical.

Cyber Security Engineer – Ethical Hacking & Application Security

Experience: 2–3 years
Role: Full-time

We are looking for a hands-on Cyber Security Engineer / Ethical Hacker who can perform security assessments, identify vulnerabilities, and help secure web applications, APIs, mobile apps, cloud environments, and enterprise systems.

The candidate should be capable of independently performing authorized security testing, preparing professional vulnerability reports, recommending fixes, and working with development teams to improve application security.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, API, mobile and network environments.
• Conduct ethical hacking and application security testing.
• Identify OWASP Top 10, API security and authentication/authorization vulnerabilities.
• Perform manual security testing in addition to automated scans.
• Test applications for SQL injection, XSS, CSRF, SSRF, IDOR, broken access control, insecure APIs and configuration issues.
• Prepare detailed security reports including severity, evidence, business impact and remediation recommendations.
• Perform re-testing after vulnerabilities are fixed.
• Work with developers to implement secure coding practices.
• Support security audits, hardening, risk assessments and client security engagements.
• Stay updated on new vulnerabilities, exploits, attack techniques and security tools.

Required Tools & Technical Exposure

• Burp Suite
• OWASP ZAP
• Nmap
• Nessus / OpenVAS
• Metasploit
• Kali Linux
• Wireshark
• Nikto
• SQLMap
• Postman / API testing tools
• MobSF or similar mobile security tools
• Git and Linux
• Basic Python / Bash scripting

Should have good knowledge of:

• OWASP Top 10
• OWASP API Security Top 10
• Web application penetration testing
• API security
• Network security
• Authentication, authorization and session security
• SSL/TLS and encryption fundamentals
• Linux and Windows security
• AWS / Azure cloud security basics
• Secure SDLC and secure coding practices

Preferred Certifications
CEH, eJPT, PNPT, OSCP, Security+ or equivalent practical security experience.

Candidate Profile

We need someone who is not just familiar with security tools, but can be given a business application and independently understand the architecture, plan the security assessment, perform ethical hacking, identify real vulnerabilities, explain the risk clearly, and guide the development team on remediation.

Job Title: Cyber Security Engineer – Ethical Hacking & Application Security

For your objective of building this as a new company vertical, I would prioritize strong hands-on Burp Suite + web/API penetration testing + reporting skills over certifications alone. This person can then gradually help you establish your VAPT methodology, security checklists, reporting templates and client-facing cybersecurity services.

Pay: ₹250,000.00 - ₹600,000.00 per year

Work Location: In person