Cyber Security Engineer

We are looking for an experienced and technically proficient Cybersecurity Engineer with 3–5 years of hands-on experience in securing enterprise applications, IT infrastructure, networks, databases, and business-critical data.

The candidate will be responsible for strengthening the organizations overall security posture by identifying vulnerabilities, implementing security controls, conducting security assessments, and ensuring that applications, infrastructure, data, and operational workflows meet required security standards.

The ideal candidate should possess strong technical expertise, practical implementation experience, and the ability to independently identify, assess, and mitigate security risks.

1. Application & API Security

• Secure web applications, mobile applications, dashboards, APIs, and internal business platforms.
• Identify and remediate application vulnerabilities, authentication issues, authorization flaws, and security misconfigurations.
• Implement secure coding practices and application security testing.
• Ensure protection against common vulnerabilities, including OWASP Top 10.

2. Infrastructure & Network Security

• Secure on-premises and cloud infrastructure, servers, operating systems, networks, and endpoints.
• Configure and manage firewalls, VPNs, network segmentation, IDS/IPS, and endpoint security solutions.
• Perform server hardening and infrastructure security assessments.
• Monitor infrastructure for unauthorized access and suspicious activities.

3. Data Security & Protection

• Establish security controls to protect sensitive and confidential organizational data.
• Implement encryption, secure data storage, access restrictions, backup policies, and data protection mechanisms.
• Secure databases, internal repositories, and data transfer channels.
• Implement appropriate data access, retention, and protection policies.

4. DevSecOps & Pipeline Security

• Secure CI/CD pipelines, source code repositories, deployment workflows, and development environments.
• Implement security scanning tools such as SAST, DAST, and dependency vulnerability scanners.
• Identify security gaps in software development and deployment processes.
• Promote security-first practices throughout the software development lifecycle.

5. Vulnerability Assessment & Penetration Testing

• Conduct regular Vulnerability Assessment and Penetration Testing (VAPT).
• Perform security audits, risk assessments, and configuration reviews.
• Identify security weaknesses and ensure appropriate remediation.
• Prepare technical assessment reports and maintain vulnerability tracking.

6. Security Governance & Compliance

• Develop, implement, and maintain organizational security policies, procedures, and standards.
• Ensure security controls align with relevant industry frameworks and regulatory requirements.
• Establish access management policies, MFA, RBAC, and least-privilege principles.
• Maintain security documentation, audit records, and compliance reports.

7. Threat Monitoring & Incident Response

• Monitor security logs and identify suspicious activities or potential threats.
• Investigate security incidents and coordinate appropriate response and recovery measures.
• Establish incident response procedures and security monitoring practices.
• Implement and periodically validate backup and disaster recovery mechanisms.

• 3–5 years of professional experience in Cybersecurity, Information Security, or a related domain.
• Strong understanding of application, network, infrastructure, and data security.
• Practical experience in VAPT, vulnerability management, and security audits.
• Knowledge of OWASP Top 10, API security, and secure coding practices.
• Hands-on experience with Linux/Windows server security, networking, firewalls, and endpoint protection.
• Understanding of cloud security, database security, IAM, and access management.
• Familiarity with DevSecOps practices, CI/CD security, and security testing tools.
• Knowledge of security frameworks such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Strong analytical, troubleshooting, documentation, and incident management skills.
• Ability to independently assess security risks and implement effective mitigation strategies.

Candidates with relevant professional certifications will be preferred:

• CompTIA Security+
• CEH (Certified Ethical Hacker)
• OSCP (Offensive Security Certified Professional)
• CISSP
• CISM
• ISO 27001 Lead Implementer / Lead Auditor
• CCSP or equivalent cloud security certifications.

Candidates with demonstrable hands-on experience, relevant projects, and documented cybersecurity work will be strongly preferred.

• Completed cybersecurity projects with clear technical implementation details.
• Relevant case studies involving application security, infrastructure hardening, network security, or data protection.
• Experience conducting and documenting VAPT, vulnerability assessments, and security audits.
• Practical exposure to securing enterprise applications, APIs, dashboards, databases, servers, or cloud environments.
• Experience with DevSecOps, CI/CD pipeline security, secure deployment workflows, and access management.
• Documented examples of identifying vulnerabilities, implementing mitigation strategies, and improving an organizations security posture.
• Research papers, technical publications, security reports, or contributions to relevant open-source cybersecurity projects will be an added advantage.

Candidates are encouraged to share their cybersecurity project portfolio, relevant case studies, security assessment reports, or technical documentation during the application process. Confidential information must be appropriately redacted.

• Position :Cybersecurity Engineer
• Experience: 3–5 Years
• Employment Type: Full-time
• Work Mode: On-site
• Location: Gurugram, Haryana
• Joining: Immediate joiners or candidates available within 15–30 days preferred

We are looking for an individual who can take ownership of organizational cybersecurity, proactively identify potential threats, and establish a robust security-first environment.

The candidate should be capable of working across multiple technology systems, independently identifying security gaps, implementing preventive measures, and ensuring that applications, infrastructure, sensitive data, and operational workflows remain secure and resilient.

Practical implementation experience, problem-solving ability, and the capacity to take end-to-end ownership of security responsibilities will be given significant consideration.