66 Security Testing jobs in Delhi

Job description

As a Security Engineer - VAPT, you will be responsible for conducting comprehensive security assessments, identifying vulnerabilities, and implementing effective remediation strategies. Leveraging your expertise in penetration testing and ethical hacking, you will play a key role in enhancing the security posture of our clients' systems and networks. This position offers an exciting opportunity to work on challenging projects, collaborate with talented professionals, and contribute to the advancement of cybersecurity practices.

Key Responsibilities:

• Perform end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for clients' IT infrastructure, applications, and networks.
• Conduct thorough security assessments using industry-standard tools and methodologies, including but not limited to, Nmap, Nessus, Metasploit, Burp Suite, and OWASP.
• Identify and exploit security vulnerabilities to assess the potential impact on clients' systems and data.
• Prepare detailed assessment reports outlining findings, risk levels, and recommended remediation measures.
• Collaborate with clients' IT teams to prioritize and address identified security issues in a timely manner.
• Develop and implement custom scripts or tools to enhance testing capabilities and automate repetitive tasks.
• Stay abreast of emerging security threats, vulnerabilities, and industry best practices to continually improve testing methodologies.
• Provide guidance and mentorship to junior security engineers, fostering a culture of knowledge sharing and skill development within the team.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 2+ years of experience in cybersecurity, with a focus on Vulnerability Assessment and Penetration Testing.
• Proficiency in using tools such as Nmap, Nessus, Metasploit, Burp Suite, and OWASP.
• Hands-on experience with various operating systems, including Windows, Linux, and Unix.
• Strong understanding of network protocols, web application architecture, and common security vulnerabilities.
• Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), or similar certifications preferred.
• Excellent analytical skills and attention to detail, with the ability to prioritize and manage multiple tasks effectively.
• Effective communication skills, both verbal and written, with the ability to convey technical concepts to non-technical stakeholders.
• Proven track record of delivering high-quality security assessments and actionable recommendations

Job Title: Security Engineer – Email Security Specialist

Location: Remote

Experience Required: 5 to 10 years

Job Summary:

We are seeking a highly skilled and experienced Security Engineer with deep expertise in email security , specifically with Mimecast and Cofense Triage & Vision . The ideal candidate will play a critical role in protecting our organization from email-based threats and enhancing our cybersecurity posture.

Key Responsibilities:

• Design, implement, and manage email security solutions using Mimecast and Cofense.
• Monitor, analyze, and respond to phishing and email-based threats using Cofense Triage & Vision.
• Collaborate with incident response teams to investigate and remediate email security incidents.
• Develop and maintain email security policies, procedures, and best practices.
• Conduct threat hunting and analysis to identify emerging email threats.
• Provide technical guidance and support to internal teams on email security matters.
• Generate reports and metrics to track email threat trends and security posture.

Required Skills & Qualifications:

• 3+ years of hands-on experience with Mimecast email security solutions.
• Proven experience with Cofense Triage & Vision tools.
• Strong understanding of email threat vectors, phishing campaigns, and mitigation strategies.
• Solid foundation in cybersecurity principles and practices.
• Experience with SIEM tools, threat intelligence platforms, and incident response.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., CEH, CISSP, CISM) are a plus.

Preferred Qualifications:

• Experience working in a global or enterprise environment.
• Familiarity with other email security platforms and threat detection tools.
• Ability to work independently and collaboratively in a fast-paced environment.

Job Title: Security Engineer – Email Security Specialist

Location: Remote

Experience Required: 5 to 10 years

Job Summary:

We are seeking a highly skilled and experienced Security Engineer with deep expertise in email security , specifically with Mimecast and Cofense Triage & Vision . The ideal candidate will play a critical role in protecting our organization from email-based threats and enhancing our cybersecurity posture.

Key Responsibilities:

• Design, implement, and manage email security solutions using Mimecast and Cofense.
• Monitor, analyze, and respond to phishing and email-based threats using Cofense Triage & Vision.
• Collaborate with incident response teams to investigate and remediate email security incidents.
• Develop and maintain email security policies, procedures, and best practices.
• Conduct threat hunting and analysis to identify emerging email threats.
• Provide technical guidance and support to internal teams on email security matters.
• Generate reports and metrics to track email threat trends and security posture.

Required Skills & Qualifications:

• 3+ years of hands-on experience with Mimecast email security solutions.
• Proven experience with Cofense Triage & Vision tools.
• Strong understanding of email threat vectors, phishing campaigns, and mitigation strategies.
• Solid foundation in cybersecurity principles and practices.
• Experience with SIEM tools, threat intelligence platforms, and incident response.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., CEH, CISSP, CISM) are a plus.

Preferred Qualifications:

• Experience working in a global or enterprise environment.
• Familiarity with other email security platforms and threat detection tools.
• Ability to work independently and collaboratively in a fast-paced environment.

Job Title: Security Engineer – Email Security Specialist

Location: Remote

Experience Required: 5 to 10 years

Job Summary:

We are seeking a highly skilled and experienced Security Engineer with deep expertise in email security , specifically with Mimecast and Cofense Triage & Vision . The ideal candidate will play a critical role in protecting our organization from email-based threats and enhancing our cybersecurity posture.

Key Responsibilities:

• Design, implement, and manage email security solutions using Mimecast and Cofense.
• Monitor, analyze, and respond to phishing and email-based threats using Cofense Triage & Vision.
• Collaborate with incident response teams to investigate and remediate email security incidents.
• Develop and maintain email security policies, procedures, and best practices.
• Conduct threat hunting and analysis to identify emerging email threats.
• Provide technical guidance and support to internal teams on email security matters.
• Generate reports and metrics to track email threat trends and security posture.

Required Skills & Qualifications:

• 3+ years of hands-on experience with Mimecast email security solutions.
• Proven experience with Cofense Triage & Vision tools.
• Strong understanding of email threat vectors, phishing campaigns, and mitigation strategies.
• Solid foundation in cybersecurity principles and practices.
• Experience with SIEM tools, threat intelligence platforms, and incident response.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., CEH, CISSP, CISM) are a plus.

Preferred Qualifications:

• Experience working in a global or enterprise environment.
• Familiarity with other email security platforms and threat detection tools.
• Ability to work independently and collaboratively in a fast-paced environment.

CYBER SECURITY ENGINEER ROLE

Job Title:AppSec Engineer

The AppSec Engineer is a specialized cybersecurity role focused on DevOps engineering principles. While the expectation of their sibling role – SAE – is to have practical working security knowledge, this role specializes in it. In a multi-product environment as we have here, there are common security concerns that cut across teams. This role will be responsible for building, integrating and maintaining the connective infrastructure that will help automate security processes throughout the various product team’s environments.

The person is expected to understand our product environments well – they won’t be doing feature work, but they will not be successful without understanding the overall

architecture, the current build environment, and the tooling and technical stack of the product teams. Additionally, the team this role is attached to will lead the triage process for cybersecurity vulnerabilities identified throughout the various product environments .

Qualification:

Education: Bachelor of Engineering/ Bachelor of Technology/ Master of Engineering/ Master of Technology/ Master of Science

Discipline : Computer Science/Relevant engineering

Experience: 5 to 10 years

Job Responsibilities (Typical day in AppSec Engineer’s life):

• Read/learn/discuss latest trends/tools/best practices/updates of cyber security, application development, and cloud services industries.
• Perform custom impact and risk analysis of identified security vulnerabilities for each product team.
• Create mitigation plans with product teams to resolve security vulnerabilities.
• Build tooling to automate security into the product teams’ development, build, deployment, and operational processes.
• Actively contribute to story planning, identifying and providing expertise on work items that involve security considerations.

• Be On-Call for:
• Cyber security breaches
• High impact events (like a day zero effecting a team) or a breach
• Uptime disruptions caused by their contributions.

Skills Required (AppSec Engineer’s superpowers):

• Cloud Platform: AWS, Microsoft Azure
• Development Environments: VSCode, JetBrains, Eclipse
• Programming languages: Know at least a few languages well (Java, JavaScript/TypeScript, C++, C, Python, Powershell, unix shell, etc.)
• Infrastructure as Code: CloudFormation, CDK, Bicep, Terraform, Ansible, etc.
• SIEM/SOAR: Microsoft Sentinel, Splunk, Checkmarx
• OS: Linux, Windows
• Configuration Management tools: Git, GitHub, GitLab, Azure DevOps
• Vulnerability management tools: Nessus Pro, Tenable IO, FireEye, CrowdStrike, Defender, SpyCloud etc.

Competencies (Who AppSec Engineer is):

• Willingness to prioritize team success over individual recognition.
• Champions collaboration, knowledge sharing, and mentoring as foundational practices.
• Committed to improving DevSecOps processes through continuous learning and experimentation.
• Supports sustainable pace and actively addresses technical debt.
• Willing to work onsite one week per quarter.

Annual Goals (What AppSecEngineer will be measured on):

• Direct reduction of measured security vulnerabilities via tooling
• Cycle time to mitigate vulnerabilities, assigned -> closed
• When On-Call, 100% of response times under 15 minutes
• Leads annual threat modeling exercise for all products assigned

CYBER SECURITY ENGINEER ROLE

Job Title:AppSec Engineer

The AppSec Engineer is a specialized cybersecurity role focused on DevOps engineering principles. While the expectation of their sibling role – SAE – is to have practical working security knowledge, this role specializes in it. In a multi-product environment as we have here, there are common security concerns that cut across teams. This role will be responsible for building, integrating and maintaining the connective infrastructure that will help automate security processes throughout the various product team’s environments.

The person is expected to understand our product environments well – they won’t be doing feature work, but they will not be successful without understanding the overall

architecture, the current build environment, and the tooling and technical stack of the product teams. Additionally, the team this role is attached to will lead the triage process for cybersecurity vulnerabilities identified throughout the various product environments .

Qualification:

Education: Bachelor of Engineering/ Bachelor of Technology/ Master of Engineering/ Master of Technology/ Master of Science

Discipline : Computer Science/Relevant engineering

Experience: 5 to 10 years

Job Responsibilities (Typical day in AppSec Engineer’s life):

• Read/learn/discuss latest trends/tools/best practices/updates of cyber security, application development, and cloud services industries.
• Perform custom impact and risk analysis of identified security vulnerabilities for each product team.
• Create mitigation plans with product teams to resolve security vulnerabilities.
• Build tooling to automate security into the product teams’ development, build, deployment, and operational processes.
• Actively contribute to story planning, identifying and providing expertise on work items that involve security considerations.

• Be On-Call for:
• Cyber security breaches
• High impact events (like a day zero effecting a team) or a breach
• Uptime disruptions caused by their contributions.

Skills Required (AppSec Engineer’s superpowers):

• Cloud Platform: AWS, Microsoft Azure
• Development Environments: VSCode, JetBrains, Eclipse
• Programming languages: Know at least a few languages well (Java, JavaScript/TypeScript, C++, C, Python, Powershell, unix shell, etc.)
• Infrastructure as Code: CloudFormation, CDK, Bicep, Terraform, Ansible, etc.
• SIEM/SOAR: Microsoft Sentinel, Splunk, Checkmarx
• OS: Linux, Windows
• Configuration Management tools: Git, GitHub, GitLab, Azure DevOps
• Vulnerability management tools: Nessus Pro, Tenable IO, FireEye, CrowdStrike, Defender, SpyCloud etc.

Competencies (Who AppSec Engineer is):

• Willingness to prioritize team success over individual recognition.
• Champions collaboration, knowledge sharing, and mentoring as foundational practices.
• Committed to improving DevSecOps processes through continuous learning and experimentation.
• Supports sustainable pace and actively addresses technical debt.
• Willing to work onsite one week per quarter.

Annual Goals (What AppSecEngineer will be measured on):

• Direct reduction of measured security vulnerabilities via tooling
• Cycle time to mitigate vulnerabilities, assigned -> closed
• When On-Call, 100% of response times under 15 minutes
• Leads annual threat modeling exercise for all products assigned