VAPT Engineer - Chicago

Motion Recruitment; Chicago (IL); Hybride; USD 120 000 - 145 000; Plein temps

Avantages offerts par ce poste

Medical Insurance

Dental Benefits

Vision Benefits

Paid Time Off (PTO)

401(k)

Résumé du poste

Motion Recruitment is seeking a Vulnerability Assessment & Penetration Testing Engineer to join its cybersecurity team in Chicago, IL. This seasoned offensive security professional will lead testing engagements across enterprise systems, applications, and infrastructure, delivering actionable remediation guidance.

The role requires hands-on expertise with Nessus, Burp Suite, Kali Linux, Metasploit, and OWASP Top 10, plus CISSP and OSCP certifications.

Qualifications

• 7+ years of cybersecurity experience with significant hands-on penetration testing and vulnerability assessment expertise.
• Experience conducting web application, network, infrastructure, and mobile security assessments.
• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms.
• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies.
• In-depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques.
• Ability to manually verify vulnerabilities and eliminate false positives.
• Experience creating detailed technical reports and executive-level remediation recommendations.
• Strong written and verbal communication skills.
• Ability to work independently while managing multiple assessments and priorities.

Responsabilités

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications.
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives.
• Manage and optimize core VAPT tools, technologies, and processes.
• Conduct web, mobile, API, network, and infrastructure security assessments.
• Validate vulnerabilities through manual testing and exploitation techniques.
• Document findings and deliver clear, risk-based recommendations to stakeholders.
• Collaborate with security, infrastructure, and application teams to support remediation efforts.
• Monitor emerging threats, attack techniques, and industry best practices.
• Contribute to the ongoing improvement of vulnerability management and testing programs.
• Assist in the creation of internal security documentation, standards, and training content.

Connaissances

Penetration testing

Vulnerability assessment

Nessus

Burp Suite

AppScan

Nipper

Kali Linux

Metasploit

Wireshark

OWASP Top 10

CVE frameworks

Report writing

Communication skills

Formation

CISSP

OSCP

Bachelor's degree in Computer Science or equivalent

Outils

Nessus

Description du poste

Job DescriptionA global professional services organization is seeking a Vulnerability Assessment & Penetration Testing (VAPT) Engineer to join its cybersecurity team in Chicago, IL. This individual will play a critical role in evaluating and improving the security posture of enterprise systems, applications, and infrastructure through comprehensive vulnerability assessments and penetration testing activities.

This position is geared toward a seasoned offensive security professional who can operate as a subject matter expert, lead testing initiatives, and provide actionable guidance to technical and non-technical stakeholders. The ideal candidate combines deep technical expertise with strong communication skills and a practical approach to risk management.

The organization is committed to maintaining a mature security program and is looking for someone who is passionate about identifying weaknesses, validating risks, and helping drive security improvements across a complex enterprise environment.

Required Skills & Experience

• 7+ years of cybersecurity experience with significant hands-on penetration testing and vulnerability assessment expertise
• Strong understanding of vulnerability assessment and penetration testing methodologies, scope, objectives, and reporting requirements
• Experience conducting web application, network, infrastructure, and mobile security assessments
• Advanced proficiency with tools such as Nessus, Burp Suite, AppScan, Nipper, and similar assessment platforms
• Expertise utilizing offensive security frameworks and tools including Kali Linux, Metasploit, Wireshark, and related technologies
• In-depth knowledge of OWASP Top 10, CVE frameworks, security controls, and current exploitation techniques
• Ability to manually verify vulnerabilities and eliminate false positives
• Experience creating detailed technical reports and executive-level remediation recommendations
• Strong written and verbal communication skills
• Ability to work independently while managing multiple assessments and priorities
• CISSP certification required
• OSCP certification required
• Bachelor's degree in Computer Science or equivalent professional experience

Desired Skills & Experience

• GPEN, GWAPT, or other GIAC offensive security certifications
• Experience with API security testing and assessment methodologies
• Proficiency in scripting or programming languages used for security testing and automation
• Experience assessing AI-enabled applications, agents, and emerging technologies
• Familiarity with secure development practices and application security concepts
• Experience developing security awareness, training materials, or technical documentation

What You Will Be Doing

Daily Responsibilities

• Lead vulnerability assessments and penetration testing engagements across enterprise systems and applications
• Serve as the primary technical advisor and subject matter expert for offensive security initiatives
• Manage and optimize core VAPT tools, technologies, and processes
• Conduct web, mobile, API, network, and infrastructure security assessments
• Validate vulnerabilities through manual testing and exploitation techniques
• Document findings and deliver clear, risk-based recommendations to stakeholders
• Collaborate with security, infrastructure, and application teams to support remediation efforts
• Monitor emerging threats, attack techniques, and industry best practices
• Contribute to the ongoing improvement of vulnerability management and testing programs
• Assist in the creation of internal security documentation, standards, and training content

The Offer

• Hybrid opportunity in Chicago, IL
• Base salary up to $145,000
• Opportunity to work on complex enterprise security initiatives
• High visibility role with significant ownership and impact
• Collaborative and security-focused team environment

You will receive the following benefits

• Medical Insurance
• Dental Benefits
• Vision Benefits
• Paid Time Off (PTO)
• 401(k)

Applicants must be currently authorized to work in the US on a full-time basis now and in the future.