Security Consultant

Vulnerability / Penetration Security Engineer

We are seeking a skilled and detail-oriented Security Engineer with strong experience in vulnerability management, penetration testing, and information security operations. The ideal candidate will be responsible for identifying, assessing, and remediating security vulnerabilities across networks, systems, and web applications while supporting enterprise security technologies and operations.

Key Responsibilities

Perform vulnerability assessments and penetration testing on web applications and enterprise systems using automated security tools.

Conduct regular network vulnerability scans and provide detailed scan reports to operational and technical teams.

Identify, analyze, and classify vulnerabilities as Critical, High, Medium, or Low based on OWASP Top 10 standards and organizational risk priorities.

Collaborate with operational and development teams to prioritize and remediate identified vulnerabilities.

Support and assist with security technologies including:

SIEM solutions

Intrusion Detection Systems (IDS)

Data Loss Prevention (DLP)

Wireshark network analysis

Email gateway protection

VPN operations

Develop and maintain Python scripts and automation tools to improve security operations and reporting.

Monitor security events, analyze threats, and assist in incident response activities.

Maintain documentation of vulnerabilities, remediation activities, and security assessments.

Contribute to improving the organization’s overall security posture and compliance initiatives.

Required Qualifications

Strong background in Information Security and Vulnerability Management.

Hands-on experience with vulnerability scanning and remediation processes.

Knowledge of OWASP Top 10 vulnerabilities and secure application practices.

Experience with penetration testing methodologies and automated security tools.

Proficiency in Python scripting and programming.

Familiarity with SIEM, IDS, DLP, VPNs, email security gateways, and packet analysis tools such as Wireshark.

Strong analytical, troubleshooting, and problem-solving skills.

Excellent communication and reporting abilities