Cybersecurity Engineer – Ethical Hacking

Experience: 3+ Years

Job Type: Full-Time

Department: Information Security / Cybersecurity

Role: Cybersecurity Engineer / Ethical Hacker

Job Summary

We are looking for a skilled Cybersecurity Engineer with hands-on experience in ethical hacking, penetration testing, vulnerability assessment, and security analysis. The ideal candidate will be responsible for identifying security vulnerabilities, assessing risks, conducting authorized security testing, and implementing effective security measures to protect the organization's IT infrastructure, applications, and sensitive data.

The candidate should have a strong understanding of offensive security techniques, common cyberattack methodologies, security frameworks, and industry best practices.

Key Responsibilities

- Perform penetration testing and vulnerability assessments on web applications, mobile applications, APIs, networks, and infrastructure.
- Conduct authorized ethical hacking activities to identify security weaknesses and potential attack vectors.
- Execute network, application, and infrastructure security testing using industry-standard tools.
- Identify, analyze, validate, and prioritize vulnerabilities based on business impact and risk severity.
- Conduct security assessments based on OWASP Top 10, OWASP API Security Top 10, and other relevant security standards.
- Perform internal and external network penetration testing, including Active Directory security assessments.
- Assess security configurations across operating systems, servers, cloud environments, and network devices.
- Use tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux for security testing.
- Prepare detailed vulnerability assessment and penetration testing (VAPT) reports with evidence, risk ratings, and remediation recommendations.
- Collaborate with development, infrastructure, DevOps,



and security teams to remediate identified vulnerabilities.
- Conduct retesting and validation of security fixes to ensure vulnerabilities have been addressed.
- Support security audits, risk assessments, incident investigations, and compliance initiatives.
- Stay updated on emerging cyber threats, vulnerabilities, exploits, and offensive security techniques.
- Ensure all security testing activities are performed with appropriate authorization and within the approved scope.

Required Skills and Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
- Minimum 3+ years of hands-on experience in cybersecurity, ethical hacking, penetration testing, or vulnerability assessment.
- Solid knowledge of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and routing.
- Hands-on experience with web application, API, network, and infrastructure penetration testing.
- Good understanding of OWASP Top 10, common web vulnerabilities, authentication and authorization flaws, and security misconfigurations.
- Experience using security tools such as Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux.
- Knowledge of Linux and Windows operating systems, command-line tools, and basic scripting.
- Understanding of Active Directory security, privilege escalation, and lateral movement techniques in authorized test environments.
- Familiarity with vulnerability management, CVSS scoring, risk assessment, and remediation processes.




- Ability to document technical findings and communicate security risks clearly to technical and non-technical stakeholders.

Preferred Skills

- Knowledge of cloud security across AWS, Microsoft Azure, or Google Cloud Platform.
- Experience with source code security reviews, SAST, DAST, and software composition analysis.
- Familiarity with Python, Bash, PowerShell, or other scripting languages for security automation.
- Understanding of security frameworks such as NIST CSF, ISO 27001, and CIS Controls.
- Experience with red teaming, threat modeling, exploit validation, and security testing automation.
- Familiarity with bug bounty methodologies and responsible vulnerability disclosure.

Preferred Certifications

- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
- CompTIA Security+
- eLearnSecurity certifications, such as eJPT or relevant advanced penetration testing certifications
- CREST certifications or other recognized penetration testing credentials

Key Deliverables

- Vulnerability Assessment and Penetration Testing (VAPT) reports.
- Security risk assessments and prioritized remediation plans.
- Technical documentation of vulnerabilities, proof of concept, and remediation guidance.
- Retesting reports confirming successful remediation.
- Recommendations to strengthen the organization's overall security posture.

Ideal Candidate Profile The ideal candidate is a proactive security professional with strong analytical and problem-solving skills, practical penetration testing experience, attention to detail, and a commitment to ethical security practices. The candidate should be able to work independently, collaborate across teams, and translate technical vulnerabilities into actionable security improvements

Benefits

- Paid sick time
- Paid time off
- Provident Fund
- Work from home

Work Location: Remote

📌 Cybersecurity Engineer – Ethical Hacking (India)
🏢 Storygame
📍 India