Cyber Security Specialist

Muthoot FinCorp (MFL); India; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Muthoot FinCorp (MFL) is seeking an experienced Cybersecurity Specialist to identify, assess, and remediate security vulnerabilities across applications, networks, and infrastructure. The role demands hands-on penetration testing, project management, and risk communication to business teams.

You will own security engagements from scoping to closure, align testing with OWASP/NIST standards, and coordinate with DevOps and vendors to drive timely remediation.

Qualifications

• 3–5 years of hands-on experience in VAPT/penetration testing.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field.
• Strong knowledge of OWASP Top 10, SANS Top 25 and common attack vectors.
• Experience with security testing tools (Burp Suite, Nmap, Metasploit, Nessus/Qualys, etc.).
• Ability to explain risk in business terms and document remediation.
• Experience with cloud security (AWS/Azure/GCP) is a plus.
• Preferred OSCP/CEH/CompTIA Security+/GPEN/GWAPT certifications.

Responsibilities

• Conduct vulnerability assessments and penetration testing on web/mobile apps, APIs, networks, and AI/ML apps.
• Perform manual exploitation and validate findings to remove false positives.
• Prepare detailed technical reports with risk ratings, evidence, and remediation guidance.
• Stay current with CVEs, attack techniques, and threat intelligence.
• Contribute to security tooling, scripts, and testing methodologies.
• Own end-to-end security engagements from scoping to closure.
• Coordinate with development, DevOps and external testers; manage timelines.
• Review security reports for quality and consistency before delivery.
• Document risk discussions with business/tech teams and align priorities.

Skills

VAPT / penetration testing

Stakeholder management

Risk communication

Project management

Technical report writing

Python scripting

Threat hunting/SIEM basics

Cloud security basics

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

Burp Suite

Nmap

Metasploit

Nessus/Qualys

Wireshark

Nikto

sqlmap

OWASP ZAP

Job description

About the Role

We are looking for an experienced Cybersecurity Specialist Cyber Security, Enterprise Risk Management to identify, assess, and help remediate security vulnerabilities across our applications, networks, and infrastructure, while also owning end-to-end security engagements and coordinating with stakeholders across the organization. The ideal candidate combines strong hands‑on penetration testing skills with the ability to manage projects, communicate risk to business teams, and drive engagements from scoping to closure.

Key Responsibilities — Technical

• Conduct vulnerability assessments and penetration testing on web applications, mobile applications, APIs, networks, and AI/ML applications
• Perform manual exploitation and validate findings from automated scanning tools to eliminate false positives
• Prepare detailed technical reports with risk ratings, evidence (PoCs), and remediation recommendations
• Stay current with the latest CVEs, attack techniques, and threat intelligence
• Contribute to internal security tooling, scripts, and testing methodologies
• Ensure testing aligns with OWASP, NIST, PTES, OSSTMM or SANS methodologies

Key Responsibilities — Engagement & Stakeholder Management

• Own end-to-end security engagements, from scope definition through remediation closure
• Define assessment scope and strategy based on business criticality and regulatory requirements
• Plan and prioritize assessments across the portfolio, balancing risk, compliance deadlines, and business needs
• Manage multiple concurrent projects and ensure timely delivery of engagements
• Review and approve security reports, ensuring quality, accuracy, and consistency before client/stakeholder delivery
• Coordinate with internal teams (development, DevOps, IT) and external vendors/third-party testers
• Track remediation and closure timelines, following up with relevant owners
• Conduct risk discussions with business and technology teams to align severity and remediation priority
• Present security findings and risk posture to management and leadership
• Manage escalations related to findings, delays, or engagement issues
• Handle resource planning and allocation across engagements
• Contribute to the development of security policies and standards
• Align security initiatives and priorities with broader organizational objectives

Required Skills & Qualifications

• 3–5 years of hands-on experience in VAPT / penetration testing
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline
• Strong knowledge of OWASP Top 10, SANS Top 25, and common attack vectors
• Proficiency with tools such as Burp Suite, Nmap, Metasploit, Nessus/Qualys, Wireshark, Nikto, sqlmap, OWASP ZAP
• Experience with network penetration testing (internal/external), web/mobile app testing, API security testing and AI security.
• Familiarity with scripting/programming (Python, Bash, PowerShell) for automation and custom exploit development
• Understanding of cloud security (AWS/Azure/GCP) is a plus
• Good understanding of TCP/IP, firewalls, IDS/IPS, and network protocols
• Demonstrated experience managing security engagements or projects, including stakeholder coordination and timeline ownership
• Strong report-writing skills, with experience reviewing/approving reports from other testers

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• CompTIA Security+/PenTest+
• GPEN / GWAPT (GIAC)

Soft Skills

• Strong stakeholder management and executive communication skills
• Ability to translate technical risk into business language for leadership
• Analytical mindset with attention to detail
• Ability to manage multiple engagements and competing priorities independently
• Strong verbal and written communication for client-facing and management reporting
• Comfortable handling escalations and driving resolution under time pressure