VAPT Engineer - Chicago

Job Description A global professional services organization is seeking a Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join its cybersecurity team in Chicago, IL . This individual will play a critical role in evaluating and improving the security posture of enterprise systems, applications, and infrastructure through comprehensive vulnerability assessments and penetration testing activities.

This position is geared toward a seasoned offensive security professional who can operate as a subject matter expert, lead testing initiatives, and provide actionable guidance to technical and non-technical stakeholders. The ideal candidate combines deep technical expertise with strong communication skills and a practical approach to risk management.

The organization is committed to maintaining a mature security program and is looking for someone who is passionate about identifying weaknesses, validating risks, and helping drive security improvements across a complex enterprise environment. Required Skills & Experience

• 7+ years of cybersecurity experience with significant hands-on penetration testing and vulnerability assessment expertise
• Strong understanding of vulnerability assessment and penetration testing methodologies, scope, objectives, and reporting requirements
• Experience conducting web application, network, infrastructure, and mobile security assessments
• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms
• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies
• In-depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques
• Ability to manually verify vulnerabilities and eliminate false positives
• Experience creating detailed technical reports and executive-level remediation recommendations
• Strong written and verbal communication skills
• Ability to work independently while managing multiple assessments and priorities
• CISSP certification required
• OSCP certification required
• Bachelor's degree in Computer Science or equivalent professional experience

Desired Skills & Experience

• GPEN, GWAPT, or other GIAC offensive security certifications
• Experience with API security testing and assessment methodologies
• Proficiency in scripting or programming languages used for security testing and automation
• Experience assessing AI-enabled applications, agents, and emerging technologies
• Familiarity with secure development practices and application security concepts
• Experience developing security awareness, training materials, or technical documentation

What You Will Be Doing Daily Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives
• Manage and optimize core VAPT tools, technologies, and processes
• Conduct web, mobile, API, network, and infrastructure security assessments
• Validate vulnerabilities through manual testing and exploitation techniques
• Document findings and deliver clear, risk-based recommendations to stakeholders
• Collaborate with security, infrastructure, and application teams to support remediation efforts
• Monitor emerging threats, attack techniques, and industry best practices
• Contribute to the ongoing improvement of vulnerability management and testing programs
• Assist in the creation of internal security documentation, standards, and training content

The Offer

• Hybrid opportunity in Chicago, IL
• Base salary up to $145,000
• Opportunity to work on complex enterprise security initiatives
• High visibility role with significant ownership and impact
• Collaborative and security-focused team environment

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.

Posted By: Nick Ramler