Technical Services Engineer Expert_Cyber Security_VAPT

Mandatory Skills: Vulnerability Assessment, Penetration Testing, Incident Response, Cyber Security, Azure, Vapt, OWASP, Forensic, SOC, Cloud Security

Exp:7+years 

Location: Pune

• High proficiency in English grammar, vocabulary.


• Fluency in speech - Ability to hold a conversation with ease.


• Listening skills - Comprehend what is being said, respond appropriately without interrupting the speaker.


• Strong sense of personal accountability regarding decision-making and working with department teams.


• Good to have any Information security certifications like CompTIA Security+, CEH, CHFI, CPENT, ISO 27001 etc.


• Ability to decide & act in ambiguity.


• 6–7+ years in Cybersecurity / Information Security


• Experience in SOC operations, incident response, and penetration testing


• Prior experience in team handling or technical leadership.

Incident Response & Digital Forensics

• Lead end-to-end incident response lifecycle:




• Detection


• Containment


• Eradication


• Recovery




• Conduct digital forensic investigations (disk, memory, logs)


• Perform root cause analysis (RCA) and publish detailed reports


• Ensure proper evidence handling and chain of custody

Penetration Testing & Vulnerability Management

• Perform penetration testing (Network, Web, API)


• Conduct vulnerability assessments and risk-based prioritization


• Validate findings and eliminate false positives


• Work closely with IT/dev teams for remediation tracking


• Maintain and enhance security testing methodologies

Threat Detection & Engineering

• Analyze logs from SIEM, EDR, Firewalls, and Proxy systems


• Improve threat detection use cases and alert tuning


• Investigate advanced threats including:




• Malware infections


• Data exfiltration


• Lateral movement




• Support proactive threat hunting activities

Cloud Security Assessment & Governance

• Perform cloud security assessments across platforms such as AWS, Azure.


• Review and validate cloud configurations:


• Identity & Access Management (IAM)


• Storage security (S3, Blob, etc.)


• Network security (Security Groups, NSG, VPC)

Stakeholder Management & Reporting

• Present security posture, risks, and trends to leadership


• Translate technical findings into business impact


• Create executive dashboards and reports


• Collaborate with cross-functional teams (IT, Dev, Management)

Technical Skills

• Security Operations

• SIEM, EDR (e.g., Microsoft Defender, FireEye)


• Log analysis (Firewall, Proxy, Endpoint)

• Offensive Security


• Tools: Burp Suite, Nmap, Metasploit, SQLMap, OWASP ZAP

• Strong understanding of OWASP Top 10

Vulnerability Management

• Tools: Nessus, Qualys


• CVE/CVSS analysis and patch validation

Digital Forensics & Malware Analysis

• Tools: FTK, EnCase, Autopsy, Volatility (basic)


• Static/Dynamic malware analysis (IDA, Ghidra – good to have)