Hybrid VAPT Engineer: Lead Pen Testing & Risk Remediation

Salt Digital Recruitment; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Salt Digital Recruitment is seeking a Security Vulnerability and Penetration Testing Engineer for a full-time, hybrid role in Chicago, IL. You will conduct advanced penetration testing across systems, platforms, and applications, acting as SME for VAPT activities and tooling.

You will own and optimize VAPT processes, deliver actionable remediation reports, and stay ahead of emerging threats while collaborating with global security teams to strengthen risk management and security resilience.

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• CISSP and OSCP certifications are required; GIAC GPEN or GWAPT preferred.
• Deep knowledge of VAPT, ethical hacking, and risk frameworks.
• Proficiency with security tools like Nessus, Burp Suite, AppScan.
• Strong scripting (Python/PowerShell/Bash) is a plus.

Responsibilities

• Conduct advanced security penetration testing across systems, platforms, and apps.
• Serve as SME for all VAPT functions and tooling.
• Deliver detailed assessment reports with remediation guidance.
• Stay current on exploits and attack techniques to refine methods.

Skills

VAPT concepts

Ethical hacking

Risk management

Python scripting

Strong communication

Education

Bachelor's degree in Computer Science

Tools

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Wireshark

Kali

Metasploit

Job description

Salt Digital Recruitment is seeking a Security Vulnerability and Penetration Testing Engineer for a full-time, hybrid role in Chicago, IL. You will conduct advanced penetration testing across systems, platforms, and applications, acting as SME for VAPT activities and tooling.

You will own and optimize VAPT processes, deliver actionable remediation reports, and stay ahead of emerging threats while collaborating with global security teams to strengthen risk management and security resilience.