Job Description

A leading organization is seeking a Security Engineer - VAPT to strengthen its security posture and protect critical assets. This role is critical for enhancing our organization's security posture, protecting assets, and ensuring compliance with industry standards. The ideal candidate will have a deep understanding of threat intelligence, web application security, product security testing, and Red Team operations. You will play a key role in identifying vulnerabilities, implementing security measures, and improving risk management processes.
Key Responsibilities

• Penetration Testing

Conduct in-depth penetration testing of applications, systems, and networks to identify vulnerabilities and potential security risks. Simulate attacks to discover potential weaknesses in the infrastructure and applications. * Infrastructure Risk Assessment
Perform comprehensive infrastructure risk assessments, evaluating critical systems, networks, and cloud environments for security vulnerabilities and compliance gaps. * Incident Response
Lead incident response efforts, coordinating across teams to identify, investigate, and mitigate security incidents. Develop and refine incident response playbooks and workflows. * Web Application & Product Security Testing
Assess the security of web applications and products, ensuring they meet security standards and are free from critical vulnerabilities. Provide security recommendations during product development phases. * Threat Intelligence & Red Team Operations
Leverage threat intelligence to stay ahead of emerging threats and inform Red Team exercises. Participate in or lead Red Team activities to simulate adversarial attacks and improve the organization's defense mechanisms. * Patching, Vulnerability, and Report Management
Manage the lifecycle of vulnerabilities from discovery to remediation, including patching and tracking. Optimize vulnerability reports for both technical teams and business stakeholders to ensure actionable insights. * Risk Filtering & Report Optimization
Filter and prioritize security risks to focus efforts on high-impact vulnerabilities. Continuously improve the quality and relevance of security reports, ensuring clarity and actionability for various audiences. * Security Scanning & Testing
Perform regular scanning and security testing of internal and external environments, identifying misconfigurations, unpatched systems, and other risks. * Cloud Security - Azure Landing Zones
Ensure secure design and configuration of Azure landing zones, following best practices for securing cloud environments. Collaborate with cloud architects to maintain robust security controls. * Endpoint & Data Protection
Implement and manage endpoint protection and data security solutions across the organization. Ensure that sensitive data is adequately protected from unauthorized access, leakage, and breaches. * Office 365 Compliance
Oversee security configurations and compliance within Office 365 environments. Ensure adherence to corporate security policies and relevant regulations.
Required Qualifications

• Experience:

• Experience in penetration testing, vulnerability management, and incident response.
• Strong background in infrastructure security, web application security, and Red Team exercises.
• Technical Skills:

• Proficiency in penetration testing tools (e.g., Burp Suite, Metasploit, Nmap).
• Experience with vulnerability scanners (e.g., Qualys, Nessus) and patch management systems.
• Deep understanding of cloud security, particularly Azure landing zones.
• Familiarity with Office 365 security and compliance standards.
• Strong knowledge of endpoint protection solutions and data security principles

Halian Group:
With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers.
Our resourcing and smart services help you to realize tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.
At Halian, we recognize that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organizations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives. We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique. By fostering diverse and inclusive workplaces, we help our clients drive innovation, enhance collaboration, and better reflect the communities they serve.
#LI-JS1

Skills Required