Security VAPT Engineer

Salt; Chicago (IL); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Salt Digital Recruitment is seeking a Security Vulnerability and Penetration Testing Engineer for a full-time, hybrid role in Chicago, IL. You will conduct advanced penetration testing across systems, platforms, and applications, acting as SME for VAPT activities and tooling.

You will own and optimize VAPT processes, deliver actionable remediation reports, and stay ahead of emerging threats while collaborating with global security teams to strengthen risk management and security resilience.

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• CISSP and OSCP certifications are required; GIAC GPEN or GWAPT preferred.
• Deep knowledge of VAPT, ethical hacking, and risk frameworks.
• Proficiency with security tools like Nessus, Burp Suite, AppScan.
• Strong scripting (Python/PowerShell/Bash) is a plus.

Responsibilities

• Conduct advanced security penetration testing across systems, platforms, and apps.
• Serve as SME for all VAPT functions and tooling.
• Deliver detailed assessment reports with remediation guidance.
• Stay current on exploits and attack techniques to refine methods.

Skills

VAPT concepts

Ethical hacking

Risk management

Python scripting

Strong communication

Education

Bachelor's degree in Computer Science

Tools

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Wireshark

Kali

Metasploit

Job description

Security Vulnerability & Penetration Testing Engineer Full-time | Permanent | Hybrid - 3 days in office | Chicago, IL

Our client, a global leader in technology innovation and cybersecurity, is seeking a Security Vulnerability and Penetration Testing Engineer to strengthen the security posture of their enterprise systems and platforms. This role will serve as a technical authority on vulnerability assessments, penetration testing, and risk-based remediation, helping ensure the confidentiality, integrity, and availability of mission-critical infrastructure worldwide.

What You’ll Do:

• Conduct advanced security penetration testing across systems, platforms, and applications.
• Serve as the Subject Matter Expert (SME) for all VAPT (Vulnerability Assessment & Penetration Testing) functions.
• Own and optimize VAPT tools, processes, and best practices.
• Deliver detailed assessment reports with actionable remediation insights aligned to risk management principles.
• Stay current on the latest exploits, techniques, and adversary tactics, continuously refining methodologies.

Requirements & Experience:

• Bachelor’s degree in Computer Science or equivalent experience.
• Certifications: CISSP & OSCP (required), GIAC GPEN or GWAPT (preferred).
• Strong knowledge of VAPT concepts, ethical hacking, and risk management frameworks.
• Expertise with Nessus, AppScan, Burp Suite, Nipper, Trustwave, and attack tools such as Wireshark, Kali, and Metasploit.
• Familiarity with mobile platform security, vulnerability identification, and exploitation tools.
• Deep understanding of OWASP, CVE, and security control frameworks.
• Proficiency in scripting/programming languages is an asset (Python, PowerShell, Bash, etc.).
• Strong communication skills and ability to translate technical findings into business language.
• Self-starter with high attention to detail, composure under pressure, and passion for cybersecurity excellence.

Why This Role

This is an opportunity to join a globally recognized organization with a Cloud-first technology approach and a culture that values collaboration, integrity, and innovation. You’ll work alongside senior leaders in cybersecurity, engineering, and technology strategy, shaping global standards and practices in security resilience.