Cyber Security Specialist

Muthoot FinCorp (MFL); Thiruvananthapuram; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Muthoot FinCorp (MFL) is seeking an experienced Cybersecurity Specialist to identify, assess, and remediate vulnerabilities across applications, networks, and infrastructure. You will own end-to-end security engagements, communicate risk to business teams, and drive initiatives from scoping to closure.

The role requires hands-on penetration testing skills, strong reporting ability, and the capability to coordinate across diverse stakeholders, including DevOps, IT, and external testers.

Qualifications

• 3-5 years of hands-on experience in VAPT / penetration testing.
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
• Strong knowledge of OWASP Top 10, SANS Top 25, and common attack vectors.
• Proficiency with security testing tools listed above.
• Experience with managing security engagements or projects and stakeholder coordination.

Responsibilities

• Own end-to-end security engagements and remediation closure.
• Define assessment scope and strategy based on business criticality and regulatory requirements.
• Plan and prioritize assessments across the portfolio to balance risk and deadlines.
• Coordinate with internal teams and external testers; track remediation timelines.

Skills

VAPT / penetration testing

OWASP Top 10 & SANS Top 25

Cloud security (AWS/Azure/GCP)

Programming/Scripting (Python, Bash, P

Executive communication

Project management

Report writing

AI security testing

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

Burp Suite

Nmap

Metasploit

Nessus/Qualys

Wireshark

Nikto

sqlmap

OWASP ZAP

Job description

About the Role

We are looking for an experienced Cybersecurity Specialist Cyber Security, Enterprise Risk Management to identify, assess, and help remediate security vulnerabilities across our applications, networks, and infrastructure, while also owning end-to-end security engagements and coordinating with stakeholders across the organization. The ideal candidate combines strong hands-on penetration testing skills with the ability to manage projects, communicate risk to business teams, and drive engagements from scoping to closure.

Key Responsibilities Technical

• Conduct vulnerability assessments and penetration testing on web applications, mobile applications, APIs, networks, and AI/ML applications
• Perform manual exploitation and validate findings from automated scanning tools to eliminate false positives
• Prepare detailed technical reports with risk ratings, evidence (PoCs), and remediation recommendations
• Stay current with the latest CVEs, attack techniques, and threat intelligence
• Contribute to internal security tooling, scripts, and testing methodologies
• Ensure testing aligns with OWASP, NIST, PTES, OSSTMM or SANS methodologies

Key Responsibilities - Engagement & Stakeholder Management

• Own end-to-end security engagements, from scope definition through remediation closure
• Define assessment scope and strategy based on business criticality and regulatory requirements
• Plan and prioritize assessments across the portfolio, balancing risk, compliance deadlines, and business needs
• Manage multiple concurrent projects and ensure timely delivery of engagements
• Review and approve security reports, ensuring quality, accuracy, and consistency before client/stakeholder delivery
• Coordinate with internal teams (development, DevOps, IT) and external vendors/third-party testers
• Track remediation and closure timelines, following up with relevant owners
• Conduct risk discussions with business and technology teams to align severity and remediation priority
• Present security findings and risk posture to management and leadership
• Manage escalations related to findings, delays, or engagement issues
• Handle resource planning and allocation across engagements
• Contribute to the development of security policies and standards
• Align security initiatives and priorities with broader organizational objectives

Required Skills & Qualifications

• 3-5 years of hands-on experience in VAPT / penetration testing
• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related discipline
• Strong knowledge of OWASP Top 10, SANS Top 25, and common attack vectors
• Proficiency with tools such as Burp Suite, Nmap, Metasploit, Nessus/Qualys, Wireshark, Nikto, sqlmap, OWASP ZAP
• Experience with network penetration testing (internal/external), web/mobile app testing, API security testing and AI security.
• Familiarity with scripting/programming (Python, Bash, PowerShell) for automation and custom exploit development
• Understanding of cloud security (AWS/Azure/GCP) is a plus
• Good understanding of TCP/IP, firewalls, IDS/IPS, and network protocols
• Demonstrated experience managing security engagements or projects, including stakeholder coordination and timeline ownership
• Strong report-writing skills, with experience reviewing/approving reports from other testers

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• CompTIA Security+/PenTest+
• GPEN / GWAPT (GIAC)

Soft Skills

• Strong stakeholder management and executive communication skills
• Ability to translate technical risk into business language for leadership
• Analytical mindset with attention to detail
• Ability to manage multiple engagements and competing priorities independently
• Strong verbal and written communication for client-facing and management reporting
• Comfortable handling escalations and driving resolution under time pressure

Role: IT & Information Security - OtherIndustry Type: NBFCDepartment: IT & Information SecurityEmployment Type: Full Time, PermanentRole Category: IT & Information Security - OtherEducationUG: Any GraduateKey Skills