Cyber Security Engineer

Job Title: Cybersecurity Engineer – VAPT
Experience: 3–5 Years
Location: Bhubaneswar / Hyderabad
Employment Type: Full-Time
Job Summary
Polosoft Technologies is looking for a skilled Cybersecurity Engineer with hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Web/API Security, Network Security, Cloud Security, and Security Testing. The ideal candidate should have strong knowledge of OWASP security standards and the ability to identify, assess, and help remediate security vulnerabilities across applications, APIs, networks, and cloud environments.
Key Responsibilities
Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, networks, and infrastructure.
Conduct security testing to identify vulnerabilities, misconfigurations, and potential attack vectors.
Perform Web Application and API Security Testing based on OWASP standards.
Conduct Network Security assessments, including vulnerability scanning and penetration testing.
Assess Cloud Security configurations and identify security risks across cloud environments.
Analyze vulnerabilities, determine their severity and business impact, and recommend appropriate remediation.
Prepare detailed VAPT and security assessment reports with clear findings and remediation recommendations.
Perform vulnerability validation and retesting after remediation.
Stay updated on emerging vulnerabilities, attack techniques, security threats, and industry best practices.
Collaborate with development, infrastructure, and IT teams to support vulnerability remediation and improve overall security posture.
Required Skills
Strong hands-on experience in VAPT and Vulnerability Assessment.
Good knowledge of Web Application and API Security.
Strong understanding of OWASP Top 10 and common web security vulnerabilities.
Knowledge of Network Security concepts, protocols, and attack methodologies.
Exposure to Cloud Security and cloud-based infrastructure.
Experience with security testing and vulnerability scanning tools.
Good understanding of authentication, authorization, session management, encryption, and access controls.
Ability to analyze security findings and prepare professional technical reports.
Strong troubleshooting, analytical, and problem-solving skills.
Good to Have
Relevant cybersecurity certifications such as CEH, OSCP, Security+, or equivalent.
Experience with tools such as Burp Suite, OWASP ZAP, Nmap, Nessus/OpenVAS, Metasploit, or similar security tools.
Knowledge of AWS/Azure/GCP security.
Familiarity with SAST, DAST, API security testing, and CI/CD security.
Education
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Ideal candidate: Someone who can independently perform security assessments, clearly document vulnerabilities, communicate risks to technical teams, and contribute to strengthening the organization's overall security posture.

Work arrangement
No