Sr. Security Engineer – VAPT & Compliance

Experience Required:

Location:-

Role Overview-

We are seeking a skilled and driven Sr. Security Engineer with a strong background in penetration testing (web, mobile, and network) and an understanding of security compliance standards such as SOC 2, ISO 27001, and GDPR. The ideal candidate will have hands-on experience identifying and exploiting vulnerabilities, preparing technical and compliance reports, and guiding clients or internal teams on remediation and governance.

Key Responsibilities-

• Conduct penetration testing of web applications, mobile apps (iOS/Android), and internal/external networks.

• Perform vulnerability assessments and risk evaluations across client environments.

• Create detailed technical and executive reports with prioritized remediation strategies.

• Assist in SOC 2 readiness assessments, ISO 27001 implementation, and GDPR compliance checks.

• Collaborate with cross-functional teams for remedial activities to improve the security posture.

• Stay updated with the latest exploits, tools, and compliance updates.

Required Qualifications-

• 6-8 years of experience in cybersecurity with a focus on penetration testing and compliance.

• Proficiency in tools like Burp Suite, Nmap, Metasploit, Nessus, MobSF, and manual testing techniques.

• Strong knowledge of OWASP Top 10, secure coding practices, network protocols, and common attack vectors.

• Understanding of SOC 2, ISO 27001, GDPR, and associated implementation or audit processes.

Certifications (Preferred)-

• CEH (Certified Ethical Hacker)

• ISO/IEC 27001 Lead Auditor / Lead Implementer

• Other relevant certs: e.g., CompTIA Security+, eWPT, eCPPT, GPEN

Nice-to-Have Skills-

• Familiarity with DevSecOps pipelines, source code reviews, or CI/CD security integration.

• Client-facing consulting experience or report presentation skills.

• Cyber Security vibe is a must.