Cyber Security Engineer

AMIT International Group; Delhi; On-site; INR 800,000 - 1,500,000; Full time

Job summary

AMIT International Group is seeking an experienced security testing professional to perform VAPT across web applications, Android apps, networks, and APIs. You will apply black-box and grey-box testing aligned with OWASP guidelines and Top 10, using Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan to uncover vulnerabilities.

You will quantify findings with CVSS scores, assign risk ratings, and provide actionable remediation guidance in detailed security reports.

Qualifications

• Bachelor’s degree in IT, CS, or related field.
• 3–6 years of information security experience.
• Practical exposure to Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan.

Responsibilities

• Perform VAPT across web applications, Android applications, networks, and APIs.
• Conduct black-box and grey-box testing per OWASP Testing Guide and OWASP Top 10.
• Score findings using CVSS and provide remediation guidance in reports.
• Support bug bounty program triage and validation.
• Write Python or shell scripts to automate testing and reporting.

Skills

Python

Shell Scripting

Education

Bachelor’s degree in Information Technology or Computer Science

Tools

Burp Suite

MobSF

SQLMap

Nmap

Nessus

Shodan

Git

GitHub

Job description

Burp Suite, MobSF, SQLMap, Nmap, Nessus, Shodan

Security Domains

Web and Android Application, Network, and API VAPT; Bug Bounty

Testing Methodologies

OWASP Testing Guide, OWASP Top 10, Black-box & Grey-box Testing

Vulnerability Management

CVSS Scoring, Risk Rating, Remediation Guidance, Security Reporting

Scripting & Automation

Python, Shell Scripting

Web Technologies

Security Frameworks

ISO 27001, GDPR, PCI DSS

Security Controls

Firewalls, Web Application Firewall (WAF)

Version Control

Git, GitHub

Key Responsibilities

Security Testing & Vulnerability Management

• Perform Vulnerability Assessment and Penetration Testing (VAPT) across web applications, Android applications, networks, and APIs.
• Conduct black-box and grey-box testing aligned with the OWASP Testing Guide and OWASP Top 10. Use tools such as Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan to identify and validate vulnerabilities.
• Score and prioritize findings using CVSS, assign risk ratings, and provide clear, actionable remediation guidance.Prepare detailed security reports and communicate findings to technical and non-technical stakeholders.
• Contribute to and support bug bounty program triage and validation.
• Write and maintain Python or shell scripts to automate recurring testing and reporting tasks.

Security Operations & Incident Response

• Become proficient in security tools across network, cloud, email, threat detection and response, and compliance disciplines.
• Analyze, follow up, and directly remediate the ticket queue of suspicious or malicious events (SIEM, email security tools, network security tools, etc.).
• Follow up on the ticket queue of internal IT requests and approvals.
• Respond to security-related communications from users, vendors, and sponsors, including threats reported by users, vendor breach notifications, and verification of the safety of files or emails.
• Maintain the informational assets database and coordinate the review process to ensure appropriate permission levels for those assets.
• Perform security audits to confirm that policies and procedures are being followed.

Governance, Research & Collaboration

• Research and prepare write-ups on complex technical topics, vendor proposals, and company policy recommendations.
• Assist Information Security Engineers on enterprise-wide projects, including deploying security technologies, supporting compliance requests, and collaborating with other IT teams.
• Support alignment with security frameworks such as ISO 27001, GDPR, and PCI DSS, and maintain awareness of firewall and WAF controls.
• Use Git/GitHub for version control of scripts, tools, and documentation.

Qualifications

• Bachelor’s degree, preferably in Information Technology, Computer Science, or a related field.
• Experience 3-6 years Prior internship, co-op, or work experience within Information Security or a related security role.
• Practical exposure to Security Testing Tools including Burp Suite, MobSF, SQLMap, Nmap, Nessus, and Shodan.
• Understanding of OWASP Testing Guide, OWASP Top 10, and black-box/grey-box testing methodologies.
• Working experience with, or knowledge of, some of the following: SIEM, Endpoint Detection & Response (EDR), cloud-based architecture (e.g., Azure), Privileged Access Management/Identity Access Management, and Active Directory.
• Fundamental scripting skills in Python and/or PowerShell/Shell scripting.
• Exceptional communication skills, strong analytical thinking, and the ability to work well within small teams.
• Strong organizational skills with the ability to prioritize multiple projects simultaneously.

AMIT is proud to be an equal opportunity employer and is committed to providing equal opportunities to all employees and applicants for employment. We do not discriminate on the basis of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, Veteran status, or any other legally protected status