Cyber Security Engineer

Polosoft Technologies; Hyderabad; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Polosoft Technologies is seeking a Cybersecurity Engineer specialized in VAPT to assess web apps, APIs, networks, and cloud environments. You will identify vulnerabilities, perform security testing, and collaborate with teams to implement fixes.

Strong knowledge of OWASP Top 10 and reporting is essential. Ideal candidates have 3–5 years of hands-on experience, a security mindset, and the ability to communicate risks to technical teams.

Qualifications

• Hands-on VAPT experience across web apps, APIs, networks, and cloud.
• Proficient in OWASP Top 10 and common web vulnerabilities.
• Ability to document findings and communicate risks clearly.

Responsibilities

• Perform VAPT for web apps, APIs, networks, and infrastructure.
• Identify vulnerabilities and misconfigurations and suggest remediations.
• Conduct web/API security testing based on OWASP standards.
• Assess cloud security configurations and risks across environments.
• Prepare detailed VAPT and security assessment reports with remediation.
• Retest after remediation and stay updated on threats.

Skills

VAPT and Vulnerability Assessment

Web Application Security

OAWSP Top 10

Network Security

Cloud Security

Security Testing Tools

Authentication & Access Controls

Vulnerability Reporting

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus/OpenVAS

Metasploit

Job description

Job Title: Cybersecurity Engineer - VAPT

Experience: 3-5 Years

Location: Bhubaneswar / Hyderabad

Employment Type: Full-Time

Job Summary

Polosoft Technologies is looking for a skilled Cybersecurity Engineer with hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Web/API Security, Network Security, Cloud Security, and Security Testing. The ideal candidate should have strong knowledge of OWASP security standards and the ability to identify, assess, and help remediate security vulnerabilities across applications, APIs, networks, and cloud environments.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, networks, and infrastructure.
• Conduct security testing to identify vulnerabilities, misconfigurations, and potential attack vectors.
• Perform Web Application and API Security Testing based on OWASP standards.
• Conduct Network Security assessments, including vulnerability scanning and penetration testing.
• Assess Cloud Security configurations and identify security risks across cloud environments.
• Analyze vulnerabilities, determine their severity and business impact, and recommend appropriate remediation.
• Prepare detailed VAPT and security assessment reports with clear findings and remediation recommendations.
• Perform vulnerability validation and retesting after remediation.
• Stay updated on emerging vulnerabilities, attack techniques, security threats, and industry best practices.
• Collaborate with development, infrastructure, and IT teams to support vulnerability remediation and improve overall security posture.

Required Skills

• Strong hands-on experience in VAPT and Vulnerability Assessment.
• Good knowledge of Web Application and API Security.
• Strong understanding of OWASP Top 10 and common web security vulnerabilities.
• Knowledge of Network Security concepts, protocols, and attack methodologies.
• Exposure to Cloud Security and cloud-based infrastructure.
• Experience with security testing and vulnerability scanning tools.
• Good understanding of authentication, authorization, session management, encryption, and access controls.
• Ability to analyze security findings and prepare professional technical reports.
• Strong troubleshooting, analytical, and problem-solving skills.

Good to Have

• Relevant cybersecurity certifications such as CEH, OSCP, Security+, or equivalent.
• Experience with tools such as Burp Suite, OWASP ZAP, Nmap, Nessus/OpenVAS, Metasploit, or similar security tools.
• Knowledge of AWS/Azure/GCP security.
• Familiarity with SAST, DAST, API security testing, and CI/CD security.

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Ideal candidate: Someone who can independently perform security assessments, clearly document vulnerabilities, communicate risks to technical teams, and contribute to strengthening the organization's overall security posture.