Security Engineer

TAC Security; New Delhi; On-site; INR 700,000 - 1,100,000; Full time

Job summary

TAC Security is seeking a security testing expert to perform VAPT for clients' IT infrastructure, applications and networks. The role requires 2-3 years of cybersecurity experience and proficiency with Nmap, Nessus, Metasploit, Burp Suite and OWASP.

You will identify vulnerabilities, report findings with risk levels, and work with client IT teams to remediate. Certifications such as CEH or OSCP are preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 2-3 years of experience in cybersecurity, with a focus on Vulnerability Assessment and Penetration Testing.
• Proficiency in using tools such as Nmap, Nessus, Metasploit, Burp Suite, and OWASP.
• Hands-on experience with Windows, Linux, and Unix.
• Strong understanding of network protocols, web app architecture, and common security vulnerabilities.
• CEH, OSCP or similar certifications preferred.
• Excellent analytical skills and attention to detail, with the ability to prioritize and manage multiple tasks.
• Effective communication, both verbal and written, with ability to convey technical concepts to non-technical stakeholders.

Responsibilities

• Perform end-to-end Vulnerability Assessment and Penetration Testing for clients' IT infrastructure, applications, and networks.
• Conduct security assessments using industry-standard tools and methodologies (Nmap, Nessus, Metasploit, Burp Suite, OWASP).
• Identify and exploit security vulnerabilities to assess potential impact on systems and data.
• Prepare detailed assessment reports outlining findings, risk levels, and remediation measures.
• Collaborate with clients' IT teams to prioritize and address identified security issues.
• Develop and implement custom scripts or tools to enhance testing capabilities and automate tasks.
• Stay abreast of emerging threats and best practices to continually improve testing methodologies.
• Provide guidance and mentorship to junior security engineers.

Skills

Network protocols

Web security

Security assessments

VAPT methodology

Analytical skills

Communication skills

Education

Bachelor's degree in CS/IT

Tools

Nmap

Nessus

Metasploit

Burp Suite

OWASP

Job description

Key Responsibilities:

• Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for clients' IT infrastructure, applications, and networks.
• Conduct thorough security assessments using industry-standard tools and methodologies, including but not limited to, Nmap, Nessus, Metasploit, Burp Suite, and OWASP.
• Identify and exploit security vulnerabilities to assess the potential impact on clients' systems and data.
• Prepare detailed assessment reports outlining findings, risk levels, and recommended remediation measures.
• Collaborate with clients' IT teams to prioritize and address identified security issues in a timely manner.
• Develop and implement custom scripts or tools to enhance testing capabilities and automate repetitive tasks.
• Stay abreast of emerging security threats, vulnerabilities, and industry best practices to continually improve testing methodologies.
• Provide guidance and mentorship to junior security engineers, fostering a culture of knowledge sharing and skill development within the team.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 2-3 years of experience in cybersecurity, with a focus on Vulnerability Assessment and Penetration Testing.
• Proficiency in using tools such as Nmap, Nessus, Metasploit, Burp Suite, and OWASP.
• Hands-on experience with various operating systems, including Windows, Linux, and Unix.
• Strong understanding of network protocols, web application architecture, and common security vulnerabilities.
• Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or similar certifications preferred.
• Excellent analytical skills and attention to detail, with the ability to prioritize and manage multiple tasks effectively.
• Effective communication skills, both verbal and written, with the ability to convey technical concepts to non-technical stakeholders.
• Proven track record of delivering high-quality security assessments and actionable recommendations.