WE’RE HIRING! 

Position: Cyber Security Engineer 

Location: Delhi 

Core Technical Skills  

Key Responsibilities 

Security Testing & Vulnerability Management 

• Perform Vulnerability Assessment and Penetration Testing (VAPT) across web applications, Android applications, networks, and APIs. 

• Conduct black-box and grey-box testing aligned with the OWASP Testing Guide and OWASP Top 10. Use tools such as Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan to identify and validate vulnerabilities. 

• Score and prioritize findings using CVSS, assign risk ratings, and provide clear, actionable remediation guidance.Prepare detailed security reports and communicate findings to technical and non-technical stakeholders. 

• Contribute to and support bug bounty program triage and validation. 

• Write and maintain Python or shell scripts to automate recurring testing and reporting tasks. 

Security Operations & Incident Response 

• Become proficient in security tools across network, cloud, email, threat detection and response, and compliance disciplines. 

• Analyze, follow up, and directly remediate the ticket queue of suspicious or malicious events (SIEM, email security tools, network security tools, etc.). 

• Follow up on the ticket queue of internal IT requests and approvals. 

• Respond to security-related communications from users, vendors, and sponsors, including threats reported by users, vendor breach notifications, and verification of the safety of files or emails. 

• Maintain the informational assets database and coordinate the review process to ensure appropriate permission levels for those assets. 

• Perform security audits to confirm that policies and procedures are being followed. 

Governance, Research & Collaboration 

• Research and prepare write-ups on complex technical topics, vendor proposals, and company policy recommendations. 

• Assist Information Security Engineers on enterprise-wide projects, including deploying security technologies, supporting compliance requests, and collaborating with other IT teams. 

• Support alignment with security frameworks such as ISO 27001, GDPR, and PCI DSS, and maintain awareness of firewall and WAF controls. 

• Use Git/GitHub for version control of scripts, tools, and documentation. 

Qualifications 

• Bachelor’s degree, preferably in Information Technology, Computer Science, or a related field. 

• Experience 3-6 years Prior internship, co-op, or work experience within Information Security or a related security role. 

• Practical exposure to Security Testing Tools including Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan. 

• Understanding of OWASP Testing Guide, OWASP Top 10, and black-box/grey-box testing methodologies. 

• Working experience with, or knowledge of, some of the following: SIEM, Endpoint Detection & Response (EDR), cloud-based architecture (e.g., Azure), Privileged Access Management/Identity Access Management, and Active Directory. 

• Fundamental scripting skills in Python and/or PowerShell/Shell scripting. 

• Working knowledge of HTML, JavaScript, and Node.js as they relate to application security testing. 

• Exceptional communication skills, strong analytical thinking, and the ability to work well within small teams. 

• Strong organizational skills with the ability to prioritize multiple projects simultaneously. 

How to Apply:

hr-agn@amitintl.com