Description :

Company Description :

Security Lit is a cybersecurity organization dedicated to helping businesses identify, mitigate, and respond to modern threats, ensuring their safety and growth with peace of mind.

Guided by strong core values, Security Lit promotes cyber awareness within the community and supports businesses in combating cyber-attacks.

With a specialization in Vulnerability Assessment and Penetration Testing (VAPT) for web and network applications, the company has vast expertise in identifying vulnerabilities in large corporate networks and systems.

Security Lit also aids organizations in implementing robust incident response plans, fostering security awareness, and meeting critical compliance requirements.

Role Description :

This is a full-time, on-site Application Security Engineer L2 role based in Mumbai.

The Application Security Engineer L2 will focus on conducting in-depth vulnerability assessments and penetration tests for web and network applications.

Core responsibilities include analyzing security risks, identifying vulnerabilities, developing strategies to mitigate these risks, and providing expert guidance for secure application practices.

The position will involve collaboration with cross-functional teams to implement security controls and proactively address potential cyber threats.

Qualifications :

- Experience in Vulnerability Assessment and Penetration Testing (VAPT) with proficiency in identifying security vulnerabilities in web and network systems.

- Strong knowledge of cybersecurity principles, including threat analysis, risk management, and incident response planning.

- Proficiency in programming and scripting languages, such as Python, Java, or Bash, and familiarity with security tools like Burp Suite, Metasploit, or Nessus.

- Excellent analytical, problem-solving, and critical-thinking skills with a focus on detail-oriented security assessments.

- Strong communication and collaboration skills to work effectively in a team and interact with stakeholders.

- Relevant certifications such as CEH, OSCP, CISSP, or equivalent are beneficial but not mandatory.

- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.