Cyber Security Engineer

Polosoft Technologies; Khordha; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Polosoft Technologies is seeking a Cybersecurity Engineer with hands-on VAPT experience to assess web applications, APIs, networks, and cloud environments. You will perform vulnerability assessments, identify security gaps, and provide remediation recommendations.

The ideal candidate has 3–5 years of experience, strong knowledge of OWASP Top 10, security testing tools, and the ability to clearly document findings and communicate risk to technical teams.

Qualifications

• Hands-on experience in VAPT across web apps, APIs, networks and cloud.
• Strong knowledge of OWASP Top 10 and common vulnerabilities.
• Experience with security testing tools and remediation.

Responsibilities

• Perform VAPT for web applications, APIs, networks, and infrastructure.
• Conduct security testing to identify vulnerabilities and misconfigurations.
• Perform Web Application and API Security Testing based on OWASP standards.
• Conduct Network Security assessments including scanning and pentesting.
• Assess Cloud Security configurations and risks across cloud environments.
• Analyze findings, determine severity, and recommend remediation.
• Prepare detailed VAPT and security assessment reports with remediation.
• Retest after remediation and validate fixes.
• Stay updated on new vulnerabilities and industry best practices.
• Collaborate with development, infra, and IT teams to improve security posture.

Skills

VAPT & vulnerability assessment

Web API security

OWASP Top 10

Network security

Cloud security

Security testing tools

Authentication and access control

Security reporting

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus/OpenVAS

Metasploit

Job description

Job Title: Cybersecurity Engineer – VAPT

Experience: 3–5 Years

Location: Bhubaneswar / Hyderabad

Employment Type: Full-Time

Job Summary

Polosoft Technologies is looking for a skilled Cybersecurity Engineer with hands‑on experience in Vulnerability Assessment and Penetration Testing (VAPT), Web/API Security, Network Security, Cloud Security, and Security Testing. The ideal candidate should have strong knowledge of OWASP security standards and the ability to identify, assess, and help remediate security vulnerabilities across applications, APIs, networks, and cloud environments.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, networks, and infrastructure.
• Conduct security testing to identify vulnerabilities, misconfigurations, and potential attack vectors.
• Perform Web Application and API Security Testing based on OWASP standards.
• Conduct Network Security assessments, including vulnerability scanning and penetration testing.
• Assess Cloud Security configurations and identify security risks across cloud environments.
• Analyze vulnerabilities, determine their severity and business impact, and recommend appropriate remediation.
• Prepare detailed VAPT and security assessment reports with clear findings and remediation recommendations.
• Perform vulnerability validation and retesting after remediation.
• Stay updated on emerging vulnerabilities, attack techniques, security threats, and industry best practices.
• Collaborate with development, infrastructure, and IT teams to support vulnerability remediation and improve overall security posture.

Required Skills

• Strong hands‑on experience in VAPT and Vulnerability Assessment.
• Good knowledge of Web Application and API Security.
• Strong understanding of OWASP Top 10 and common web security vulnerabilities.
• Knowledge of Network Security concepts, protocols, and attack methodologies.
• Exposure to Cloud Security and cloud‑based infrastructure.
• Experience with security testing and vulnerability scanning tools.
• Good understanding of authentication, authorization, session management, encryption, and access controls.
• Ability to analyze security findings and prepare professional technical reports.
• Strong troubleshooting, analytical, and problem‑solving skills.

Good to Have

• Relevant cybersecurity certifications such as CEH, OSCP, Security+, or equivalent.
• Experience with tools such as Burp Suite, OWASP ZAP, Nmap, Nessus/OpenVAS, Metasploit, or similar security tools.
• Knowledge of AWS/Azure/GCP security.
• Familiarity with SAST, DAST, API security testing, and CI/CD security.

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Ideal candidate: Someone who can independently perform security assessments, clearly document vulnerabilities, communicate risks to technical teams, and contribute to strengthening the organization's overall security posture.