Information Security

We are hiring an Information Security Engineer with experience in Vulnerability Management and Penetration Testing. The ideal candidate should have hands-on experience in identifying, assessing, prioritizing, and tracking security vulnerabilities, along with coordinating or performing penetration testing across enterprise environments.

Key Responsibilities

• Manage the end-to-end vulnerability management lifecycle, including identification, assessment, prioritization, remediation tracking, and validation.
• Coordinate and support penetration testing activities across web applications, APIs, networks, cloud, and infrastructure.
• Review vulnerability and penetration testing findings and work with technical teams to drive remediation.
• Perform risk-based analysis to prioritize vulnerabilities based on business impact.
• Monitor remediation progress and ensure timely closure of security findings.
• Prepare security reports, dashboards, and metrics for stakeholders.
• Collaborate with infrastructure, cloud, application, and security teams to improve the organization's security posture.
• Support security governance, compliance, and continuous process improvements.

Required Skills

• 5–8 years of experience in Information Security, Vulnerability Management, or Penetration Testing.
• Hands-on experience with vulnerability management tools such as Qualys, Tenable, Rapid7, or similar.
• Good understanding of penetration testing methodologies and security frameworks such as OWASP, MITRE ATT&CK, PTES, or NIST.
• Exposure to penetration testing tools such as Burp Suite, Nmap, Metasploit, or Kali Linux.
• Understanding of SIEM/log management platforms is an advantage.
• Knowledge of cloud security and security best practices is preferred.
• Experience with scripting languages such as Python or PowerShell is an advantage.
• Strong analytical, communication, and stakeholder management skills.

Preferred

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Security certifications such as CEH, CISSP, CISM, OSCP, GPEN, or equivalent are preferred.