Principal Software Engineer – Cybersecurity (VAPT)

Growth For Impact; Bengaluru; On-site; INR 300,000 - 550,000; Full time

Job summary

Growth For Impact in Bengaluru is seeking a senior cybersecurity expert to lead penetration testing and secure code reviews, validating exploitability and guiding remediation efforts.

You will assess cloud security across AWS, Azure, and GCP, perform risk assessments, develop testing methodologies, and mentor engineers while aligning with ISO 27001, NIST, OWASP, IEC 62443, and GDPR.

Qualifications

• Degree in Computer Science, Cybersecurity, Information Security or related field.
• 10+ years in Cybersecurity with at least 5 years in VAPT.
• Strong expertise across web/API/network pentesting, cloud security, app security, secure code review, and threat modeling.
• Hands-on with Burp Suite, Nessus, Nmap, ZAP, Metasploit, Wireshark, Kali Linux, Qualys.

Responsibilities

• Perform manual and automated penetration testing to identify security weaknesses and validate exploitability.
• Conduct source code reviews and secure architecture assessments.
• Assess cloud security posture across AWS, Azure, and GCP environments.
• Perform cybersecurity risk assessments and provide mitigation recommendations.
• Validate remediation efforts through re-testing and security audits.
• Develop security standards, guidelines, and testing methodologies.
• Mentor and guide cybersecurity engineers and VAPT analysts.
• Collaborate with stakeholders to ensure compliance with ISO 27001, NIST, OWASP, IEC 62443, and GDPR.

Skills

Web app security

API security testing

Cloud security

Threat modeling

Education

Bachelor’s or Master’s degree in CS/Cybersecurity

Tools

Burp Suite

Nessus

Nmap

OWASP ZAP

Metasploit

Wireshark

Kali Linux

Qualys

Job description

ROLE

• Perform manual and automated penetration testing to identify security weaknesses and validate exploitability.
• Conduct source code reviews and secure architecture assessments.
• Assess cloud security posture across AWS, Azure, and GCP environments.
• Perform cybersecurity risk assessments and provide mitigation recommendations.
• Validate remediation efforts through re-testing and security audits.
• Develop security standards, guidelines, and testing methodologies.
• Mentor and guide cybersecurity engineers and VAPT analysts.
• Collaborate with stakeholders to ensure compliance with industry standards such as ISO 27001, NIST, OWASP, IEC 62443, and GDPR.

REQUIREMENTS

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Security, or related field.
• 10+ years of experience in Cybersecurity, with at least 5 years focused on VAPT.
• Strong expertise in web application security testing, API security testing, network penetration testing, cloud security assessment, mobile application security, secure code review, and threat modeling.
• Hands‑on experience with tools such as Burp Suite, Nessus, Nmap, OWASP ZAP, Metasploit, Wireshark, Kali Linux, and Qualys.
• Strong understanding of OWASP Top10, CWE, CVSS, MITRE ATT&CK, and secure coding practices.
• Experience with CI/CD security integration and DevSecOps practices.
• Excellent analytical, problem‑solving, and stakeholder management skills.