Cyber Security Engineer

WE’RE HIRING!

Position: Cyber Security Engineer

Location: Delhi

Core Technical Skills

Security Testing Tools

Burp Suite, MobSF, SQLMap, Nmap, Nessus, Shodan

Security Domains

Web and Android Application, Network, and API VAPT; Bug Bounty

Testing Methodologies

OWASP Testing Guide, OWASP Top 10, Black-box & Grey-box Testing

Vulnerability Management

CVSS Scoring, Risk Rating, Remediation Guidance, Security Reporting

Scripting & Automation

Python, Shell Scripting

Web Technologies

HTML, JavaScript, Node.js (for testing purposes)

Security Frameworks

ISO 27001, GDPR, PCI DSS

Security Controls

Firewalls, Web Application Firewall (WAF)

Version Control

Git, GitHub

Key Responsibilities

Security Testing & Vulnerability Management

• Perform Vulnerability Assessment and Penetration Testing (VAPT) across web applications, Android applications, networks, and APIs.
• Conduct black-box and grey-box testing aligned with the OWASP Testing Guide and OWASP Top 10. Use tools such as Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan to identify and validate vulnerabilities.
• Score and prioritize findings using CVSS, assign risk ratings, and provide clear, actionable remediation guidance.Prepare detailed security reports and communicate findings to technical and non-technical stakeholders.
• Contribute to and support bug bounty program triage and validation.
• Write and maintain Python or shell scripts to automate recurring testing and reporting tasks.
  
  

• Become proficient in security tools across network, cloud, email, threat detection and response, and compliance disciplines.
• Analyze, follow up, and directly remediate the ticket queue of suspicious or malicious events (SIEM, email security tools, network security tools, etc.).
• Follow up on the ticket queue of internal IT requests and approvals.
• Respond to security-related communications from users, vendors, and sponsors, including threats reported by users, vendor breach notifications, and verification of the safety of files or emails.
• Maintain the informational assets database and coordinate the review process to ensure appropriate permission levels for those assets.
• Perform security audits to confirm that policies and procedures are being followed.
  
  

• Research and prepare write-ups on complex technical topics, vendor proposals, and company policy recommendations.
• Assist Information Security Engineers on enterprise-wide projects, including deploying security technologies, supporting compliance requests, and collaborating with other IT teams.
• Support alignment with security frameworks such as ISO 27001, GDPR, and PCI DSS, and maintain awareness of firewall and WAF controls.
• Use Git/GitHub for version control of scripts, tools, and documentation.
  
  

• Bachelor’s degree, preferably in Information Technology, Computer Science, or a related field.
• Experience 3-6 years Prior internship, co-op, or work experience within Information Security or a related security role.
• Practical exposure to Security Testing Tools including Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan.
• Understanding of OWASP Testing Guide, OWASP Top 10, and black-box/grey-box testing methodologies.
• Working experience with, or knowledge of, some of the following: SIEM, Endpoint Detection & Response (EDR), cloud-based architecture (e.g., Azure), Privileged Access Management/Identity Access Management, and Active Directory.
• Fundamental scripting skills in Python and/or PowerShell/Shell scripting.
• Working knowledge of HTML, JavaScript, and Node.js as they relate to application security testing.
• Exceptional communication skills, strong analytical thinking, and the ability to work well within small teams.
• Strong organizational skills with the ability to prioritize multiple projects simultaneously.