Security Engineer - Vulnerability Assessment

Job Description :

Key Responsibilities :

- Conduct regular vulnerability assessments across servers, networks, and applications to identify, prioritize, and remediate security weaknesses.

- Perform penetration testing on multiple application types including web applications, web services, APIs, and mobile apps.

- Collaborate closely with development teams to remediate security risks and implement secure coding best practices.

- Document and report security findings, remediation activities, and actionable recommendations to stakeholders.

- Monitor, analyze, and respond to emerging security threats, exploits, and vulnerabilities.

- Develop, maintain, and enforce security policies, standards, and procedures across IT systems.

- Participate in incident response activities including identification, containment, root cause analysis, and remediation of security incidents.

- Ensure security integration in the software development lifecycle (SDLC) and IT operational processes.

- Provide guidance and awareness to non-technical stakeholders on security best practices.

Required Skills & Experience :

- Strong understanding of security concepts, vulnerability management, exploitation techniques, and remediation strategies.

- Practical knowledge of OWASP Top 10 vulnerabilities and mitigation techniques.

- Proven experience in penetration testing of web, API, and mobile applications.

- Experience with security tools such as Burp Suite, Nessus, Metasploit, OWASP ZAP, or similar.

- Knowledge of network security, firewalls, intrusion detection/prevention systems (IDS/IPS), and encryption protocols.

- Ability to analyze security logs, metrics, and alerts to identify and remediate threats.

- Strong problem-solving, analytical, and communication skills for working with technical and non-technical teams.

- Familiarity with security standards and frameworks like ISO 27001, NIST, or GDPR is a plus.

Preferred Qualifications :

- Bachelors or Masters degree in Computer Science, Information Security, Cybersecurity, or related field.

- Relevant certifications such as CEH, OSCP, CISSP, or CompTIA Security+.

- Experience in cloud security (AWS, Azure, GCP) and securing cloud-native applications.

- Familiarity with security automation and scripting for continuous security assessments.