3 Vulnerability assessment Jobs in Delhi, NCR and Gurgaon | Vulnerability assessment Job openings in Delhi, NCR and Gurgaon

Responsibilities

• Execute and support application vulnerability assessments (SAST, DAST, SCA, and manual code review), ensuring findings are accurate, actionable, and relevant to application risk.
• Validate scanner results, perform false-positive analysis, and track findings through remediation, including retesting to confirm effective fixes.
• Manage multiple application security initiatives concurrently while meeting strict timelines in a fast‑paced environment.
• Prioritize vulnerabilities based on business impact, exploitability, exposure, and likelihood, using industry best practices (e.g., CVSS scoring).
• Develop and maintain dashboards and reports tracking vulnerability metrics such as severity distribution, remediation SLAs, and mean time to remediation (MTTR).
• Support the integration of security scanning and vulnerability workflows into CI/CD pipelines, leveraging existing tooling and automation.
• Facilitate remediation planning by providing actionable recommendations and coordinating root cause analysis.
• Support threat modeling and application risk assessments, with a focus on discovering insecure design patterns.
• Participate in high‑severity or zero‑day vulnerability response activities, including impact analysis and coordinated remediation efforts, as needed.
• Provide input into policies and standards related to application and cloud security controls.

Qualifications and Education Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related discipline—or equivalent professional experience.
• 5-7 years of relevant experience in application security and/or vulnerability management.
• Solid understanding of common vulnerability classes (e.g., OWASP Top 10) and secure architecture principles.
• Proficiency in using Burp Suite for manual security testing of web applications and APIs, including validation of automated findings and identification of complex authentication, authorization, and business‑logic vulnerabilities.
• Hands-on experience with tools such as Burp Suite, Fortify, Checkmarx, SonarQube, Black Duck, Tenable, and common network discovery tools (e.g., Nmap).
• Familiarity with NIST, MITRE ATT&CK, and CIS benchmarks.
• Programming/scripting proficiency in languages such as Python, Java, .NET, or similar.
• Excellent documentation, communication, and stakeholder engagement skills.

Desired Skills

• Professional certifications (e.g., Security+, SSCP, GWAPT, or pursuing CISSP, OSCP).
• Experience using the ServiceNow platform for vulnerability or incident tracking.
• Proficiency in Azure cloud and Azure DevOps environments.
• Experience using Power BI or similar tools to visualize vulnerability metrics and remediation trends for technical and non-technical stakeholders.

We are seeking a motivated Security Engineer with 1–2 years of hands-on experience in network and application security. The ideal candidate should have exposure to firewalls, WAFs, and security protocols, and a keen interest in building a strong foundation in cybersecurity operations and best practices.

Key Responsibilities

1. Configure, manage, and monitor firewalls (Cisco, Palo Alto, Netskope).
2. Support deployment and administration of Web Application Firewalls (WAFs).
3. Monitor and analyze security events, escalating incidents when necessary.
4. Assist in implementing and maintaining security policies, procedures, and controls.
5. Work with cross-functional teams to troubleshoot security-related issues.
6. Conduct basic vulnerability assessments and recommend remediation.
7. Stay updated on latest threats, vulnerabilities, and security trends.

Required Skills & Qualifications

1. 1–2 years of experience in network security and/or application security.
2. Hands-on experience with Cisco, Palo Alto, Netskope firewalls.
3. Understanding of WAF technologies and their role in securing applications.
4. Knowledge of general security protocols (SSL/TLS, IPSec, VPNs, HTTP/HTTPS, etc.).
5. Familiarity with security monitoring tools (SIEM, IDS/IPS) is a plus.
6. Basic knowledge of cloud security concepts (AWS, Azure, or GCP) is desirable.
7. Strong problem-solving and analytical skills.
8. Good communication and documentation skills.

Education

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent practical experience).
• Industry certifications (CCNA Security, Palo Alto ACE, CompTIA Security+, etc.) will be a plus.

What We Offer

• Opportunity to work with modern security technologies.
• Career development and training support in cybersecurity, DevSecOps.
• Collaborative work environment with exposure to diverse security domains.