Cyber Security Engineer — VAPT & Penetration Testing Clio Infotech Limited is a BSE-listed technology company based in Ahmedabad. We build software, AI and digital platforms for enterprises, financial institutions and government organisations, and we design our own hardware products, including secure handheld terminals. Every system we deliver has to stand up to real attackers, so we are adding a dedicated penetration tester to our team. Role Summary You will test our web applications, APIs, networks and devices the way an attacker would, explain what you find in plain terms, and work with our engineers until the issues are fixed. This is a hands-on role. Most of your time will go into testing and writing up results, and the rest into helping developers and management understand what the findings mean. Key Responsibilties
• Plan and carry out vulnerability assessments and penetration tests on web applications, APIs, internal and external networks, and cloud environments.
• Test web applications against the OWASP Top 10 and beyond, including injection, broken authentication and access control, XSS, IDOR, SSRF and business logic flaws.
• Assess network infrastructure, including firewall rules, VPN set-ups, Active Directory and cloud misconfigurations.
• Assess embedded systems, handheld terminals and IoT devices where a project calls for it.
• Write explicit reports with an executive summary, CVSS-scored findings, supporting evidence and practical remediation steps.
• Retest after fixes are applied and confirm that issues are closed.




• Walk developers and infrastructure teams through your findings, and present risk posture to senior management and clients in non-technical language.
• Provide technical evidence and gap analysis for ISO 27001 and PCI-DSS audits.
• Help bring SAST and DAST tooling into CI/CD pipelines and raise security awareness among developers.
• Keep up with new CVEs and attack techniques, and add to our internal knowledge base. Required Skills and Tools Tools Burp Suite Pro, Metasploit, Nmap, Nessus or OpenVAS, OWASP ZAP, Wireshark, SQLmap, Gobuster and Hydra, working primarily on Kali or Parrot Linux. Scripting in Python or Bash to automate repetitive testing is expected. Knowledge
• OWASP Top 10 and CWE Top 25 vulnerability categories
• CVE and CVSS scoring
• TCP/IP, DNS, HTTP/S, and the internals of OAuth and JWT
• Active Directory attack paths such as Kerberoasting and pass-the-hash, and tools like BloodHound
• Cloud security fundamentals across AWS, Azure and GCP
• Basics of embedded system and firmware analysis
• Secure SDLC and threat modelling (STRIDE) C Qualifications
• B.
E. / B.
Tech in Computer Science, Information Technology or Electronics, or an equivalent degree.
• 3 to 6 years of hands-on penetration testing and VAPT experience in a professional services or product security setting.
• Proven experience delivering structured VAPT reports to clients or internal stakeholders.
• Experience on government or regulated-sector technology projects is preferred.
• An M.
Tech in Information Security is an added advantage.

📌 Cyber Security Engineer (Ahmedabad)
🏢 Codezeros
📍 Ahmedabad