VAPT Engineer - Chicago

Kelly Services; Chicago (IL); Hybrid; USD 100,000 - 145,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Job summary

Kelly Services in Chicago, IL is seeking a senior VAPT Engineer to lead vulnerability assessments and penetration testing across enterprise systems and applications. The role calls for a subject matter expert who can guide testing initiatives and provide actionable remediation guidance to technical and non-technical stakeholders.

The ideal candidate has 7+ years of cybersecurity experience, deep knowledge of OWASP Top 10, CVE frameworks, and experience with Nessus, Burp Suite, Metasploit, Kali

Qualifications

• 7+ years of cybersecurity experience with significant hands-on penetration testing and vulnerability assessment expertise
• Strong understanding of vulnerability assessment and penetration testing methodologies, scope, objectives, and reporting requirements
• Experience conducting web application, network, infrastructure, and mobile security assessments
• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms
• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies
• In-depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques
• Ability to manually verify vulnerabilities and eliminate false positives
• Experience creating detailed technical reports and executive-level remediation recommendations
• Strong written and verbal communication skills
• Ability to work independently while managing multiple assessments and priorities
• CISSP certification required
• OSCP certification required
• Bachelor's degree in Computer Science or equivalent professional experience

Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives
• Manage and optimize core VAPT tools, technologies, and processes
• Conduct web, mobile, API, network, and infrastructure security assessments
• Validate vulnerabilities through manual testing and exploitation techniques
• Document findings and deliver clear, risk-based recommendations to stakeholders
• Collaborate with security, infrastructure, and application teams to support remediation efforts
• Monitor emerging threats, attack techniques, and industry best practices
• Contribute to the ongoing improvement of vulnerability management and testing programs
• Assist in the creation of internal security documentation, standards, and training content

Skills

Penetration testing

Vulnerability assessment

OWASP Top 10 knowledge

VAPT reporting

Risk-focused mindset

Independent multitasking

Strong communication

Threat monitoring

Education

Bachelor's degree in Computer Science or equivalent

CISSP certification

OSCP certification

Tools

Nessus

Burp Suite

AppScan

Nipper

Kali Linux

Metasploit

Wireshark

Job description

$100 - $145

Job DescriptionA global professional services organization is seeking a Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join its cybersecurity team in Chicago, IL . This individual will play a critical role in evaluating and improving the security posture of enterprise systems, applications, and infrastructure through comprehensive vulnerability assessments and penetration testing activities.

This position is geared toward a seasoned offensive security professional who can operate as a subject matter expert, lead testing initiatives, and provide actionable guidance to technical and non-technical stakeholders. The ideal candidate combines deep technical expertise with strong communication skills and a practical approach to risk management.

The organization is committed to maintaining a mature security program and is looking for someone who is passionate about identifying weaknesses, validating risks, and helping drive security improvements across a complex enterprise environment.

Required Skills & Experience

• 7+ years of cybersecurity experience with significant hands-on penetration testing and vulnerability assessment expertise

• Strong understanding of vulnerability assessment and penetration testing methodologies, scope, objectives, and reporting requirements

• Experience conducting web application, network, infrastructure, and mobile security assessments

• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms

• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies

• In-depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques

• Ability to manually verify vulnerabilities and eliminate false positives

• Experience creating detailed technical reports and executive-level remediation recommendations

• Strong written and verbal communication skills

• Ability to work independently while managing multiple assessments and priorities

• CISSP certification required

• OSCP certification required

• Bachelor's degree in Computer Science or equivalent professional experience

Desired Skills & Experience

• GPEN, GWAPT, or other GIAC offensive security certifications

• Experience with API security testing and assessment methodologies

• Proficiency in scripting or programming languages used for security testing and automation

• Experience assessing AI-enabled applications, agents, and emerging technologies

• Familiarity with secure development practices and application security concepts

• Experience developing security awareness, training materials, or technical documentation

What You Will Be Doing Daily Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications

• Serve as the primary technical advisor and subject matter expert for offensive security initiatives

• Manage and optimize core VAPT tools, technologies, and processes

• Conduct web, mobile, API, network, and infrastructure security assessments

• Validate vulnerabilities through manual testing and exploitation techniques

• Document findings and deliver clear, risk-based recommendations to stakeholders

• Collaborate with security, infrastructure, and application teams to support remediation efforts

• Monitor emerging threats, attack techniques, and industry best practices

• Contribute to the ongoing improvement of vulnerability management and testing programs

• Assist in the creation of internal security documentation, standards, and training content

The Offer

• Hybrid opportunity in Chicago, IL

• Base salary up to $145,000

• Opportunity to work on complex enterprise security initiatives

• High visibility role with significant ownership and impact

• Collaborative and security-focused team environment

You will receive the following benefits

• Medical Insurance

• Dental Benefits

• Vision Benefits

• Paid Time Off (PTO)

• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.