VAPT Engineer – Chicago

Motion Recruitment; Chicago (IL); Hybrid; USD 131,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Benefits

Vision Benefits

PTO

401(k)

Job summary

Motion Recruitment is seeking a Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join its cybersecurity team in Chicago, IL. The role focuses on evaluating and improving security across enterprise systems through hands-on testing and expert guidance.

The ideal candidate has 7+ years of cybersecurity experience, CISSP and OSCP certifications, and deep knowledge of OWASP Top 10, CVE frameworks, and reporting.

Qualifications

• 7 years of cybersecurity experience with hands-on penetration testing and vulnerability assessment.
• CISSP and OSCP certifications are required.
• Experience with web, network, infrastructure, and mobile security assessments.

Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications.
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives.
• Manage and optimize core VAPT tools, technologies, and processes.
• Conduct web, mobile, API, network, and infrastructure security assessments.
• Validate vulnerabilities through manual testing and exploitation techniques.
• Document findings and deliver clear, risk-based recommendations to stakeholders.
• Collaborate with security, infrastructure, and application teams to support remediation efforts.
• Monitor emerging threats, attack techniques, and industry best practices.
• Contribute to the ongoing improvement of vulnerability management and testing programs.
• Assist in the creation of internal security documentation, standards, and training content.

Skills

Communication

Independent work

Leadership

Report writing

Education

Bachelor's degree in Computer Science

Tools

Nessus

Burp Suite

AppScan

Nipper

Kali Linux

Metasploit

Wireshark

Job description

Job Description A global professional services organization is seeking a Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join its cybersecurity team in Chicago, IL . This individual will play a critical role in evaluating and improving the security posture of enterprise systems, applications, and infrastructure through comprehensive vulnerability assessments and penetration testing activities.

This position is geared toward a seasoned offensive security professional who can operate as a subject matter expert, lead testing initiatives, and provide actionable guidance to technical and non-technical stakeholders. The ideal candidate combines deep technical expertise with strong communication skills and a practical approach to risk management.

The organization is committed to maintaining a mature security program and is looking for someone who is passionate about identifying weaknesses, validating risks, and helping drive security improvements across a complex enterprise environment.

Required Skills & Experience

• 7 years of cybersecurity experience with significant hands‑on penetration testing and vulnerability assessment expertise
• Strong understanding of vulnerability assessment and penetration testing methodologies, scope, objectives, and reporting requirements
• Experience conducting web application, network, infrastructure, and mobile security assessments
• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms
• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies
• In‑depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques
• Ability to manually verify vulnerabilities and eliminate false positives
• Experience creating detailed technical reports and executive‑level remediation recommendations
• Strong written and verbal communication skills
• Ability to work independently while managing multiple assessments and priorities
• CISSP certification required
• OSCP certification required
• Bachelor’s degree in Computer Science or equivalent professional experience

Desired Skills & Experience

• GPEN, GWAPT, or other GIAC offensive security certifications
• Experience with API security testing and assessment methodologies
• Proficiency in scripting or programming languages used for security testing and automation
• Experience assessing AI‑enabled applications, agents, and emerging technologies
• Familiarity with secure development practices and application security concepts
• Experience developing security awareness, training materials, or technical documentation

What You Will Be Doing – Daily Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives
• Manage and optimize core VAPT tools, technologies, and processes
• Conduct web, mobile, API, network, and infrastructure security assessments
• Validate vulnerabilities through manual testing and exploitation techniques
• Document findings and deliver clear, risk‑based recommendations to stakeholders
• Collaborate with security, infrastructure, and application teams to support remediation efforts
• Monitor emerging threats, attack techniques, and industry best practices
• Contribute to the ongoing improvement of vulnerability management and testing programs
• Assist in the creation of internal security documentation, standards, and training content

The Offer

• Hybrid opportunity in Chicago, IL
• Base salary up to $145,000
• Opportunity to work on complex enterprise security initiatives
• High visibility role with significant ownership and impact
• Collaborative and security‑focused team environment

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)
  Applicants must be currently authorized to work in the US on a full‑time basis now and in the future.