Cyber Security Specialist

UBDS Digital; Hyderabad; On-site; INR 6,75,000 - 9,00,000; Full time

Job summary

A cyber security firm in Hyderabad is seeking a skilled security consultant to manage Vulnerability Assessments and Penetration Testing. The ideal candidate will have strong expertise in Web, API, Mobile, and Network security, as well as hands-on experience with various security tools. This role involves leading security initiatives, mentoring, and engaging with clients to ensure their security needs are met.

Qualifications

• Strong expertise in security areas and hands-on VAPT experience required.
• Working knowledge of security tools and frameworks essential.
• Familiarity with AWS/Azure and DevSecOps practices needed.

Responsibilities

• Manage end-to-end Vulnerability Assessment and Penetration Testing.
• Oversee external vendor audit reports for timely remediation.
• Lead and mentor security consultants in security practices.

Skills

Web, API, Mobile, and Network security

Burp Suite

VAPT and remediation

Nessus

API security

Python

Tools

Burp Suite

ZAP

Nessus

Qualys

Nmap

Wireshark

Job description

Responsibilities

• Manage end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for Web, API, Android, iOS, and Network.
• Oversee external vendor audit reports and vulnerability tracking to ensure timely remediation.
• Perform internal red team exercises, VA/PT, and network assessments for the organization's products and infrastructure.
• Design mitigation strategies for internal and client-facing vulnerabilities.
• Manage the full lifecycle of internal assessments, including planning, execution, reporting, and validation.
• Lead and mentor security consultants; implement training programs and represent the company at community security events.
• Drive security service strategies for lead conversion successfully generated 2 confirmed VAPT leads.
• Engage in client calls and stakeholder interactions to capture requirements and strengthen business relationships.
• Incorporate security governance, compliance, and risk assessment methodologies into daily operations.
• Collaborating with the IT team for different module implementations.

Requirements

• Strong expertise in Web, API, Mobile, and Network security, including hands-on VAPT and remediation.
• Proficiency with tools like Burp Suite, ZAP, Nessus, Qualys, Nmap, Wireshark, and common exploitation frameworks.
• Working knowledge of Zero Trust principles, identity-centric security, and micro-segmentation.
• Experience with API security, API gateways, OAuth/JWT, and API testing tools (Postman/Insomnia).
• Understanding of WAF implementation, rule tuning, and log analysis.
• Exposure to red teaming, OSINT, threat intelligence, and Dark Web monitoring.
• Familiarity with SOC processes, incident response, audits, and governance frameworks.
• Basic understanding of AWS/Azure security, IAM, and DevSecOps practices.
• Comfortable with Linux/Windows environments and scripting in Python/Bash/PowerShell.