Join a leading cybersecurity team dedicated to helping organizations defend against cyberattacks and safeguard critical assets. We focus on building resilient systems that not only prevent and respond to threats but also enable new opportunities by embedding security into strategic development. This role is an integral part of our Cyber Defense & Resilience practice.

This position involves contributing to projects with clear objectives as a team member responsible for delivery. You will operate with a degree of autonomy, requiring minimal direct supervision. Your work will center on performing comprehensive cybersecurity assessments, including vulnerability testing, penetration testing, network security architecture reviews, and secure code analysis.

Conduct thorough vulnerability assessments and penetration tests on web, mobile, and API applications.

Review network security architectures to identify potential weaknesses and recommend improvements.

Perform secure code reviews to ensure the integrity and security of software development.

Analyze and conduct configuration reviews for various systems, including Windows, Linux, UNIX, Solaris, and databases.

Utilize a range of vulnerability management tools and scripting languages to support security testing.

Collaborate with team members on project delivery and practice development initiatives.

A minimum of 2-4 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), with a focus on web and mobile applications.

A solid understanding of fundamental business and IT management processes.

Proficiency in TCP/IP networking, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), routers, switches, and network architecture.

Demonstrated experience in infrastructure penetration testing and application security testing.

Experience with secure code review and configuration reviews of operating systems and databases.

Familiarity with vulnerability management tools such as Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, and Fortify.

Basic scripting skills in languages like Shell, Python, or PERL.

Knowledge of security technologies including IPSEC, SSL, SSH, and VPN.

A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required.