Job Description

Job Profile: R&D Security Engineer (VAPT, Certified Ethical Hacker, 2+ Years Experience) Role Overview

An

R&D Security Engineer

specializing in

Vulnerability Assessment and Penetration Testing (VAPT)

with

Certified Ethical Hacker (CEH)

credentials and

server-side expertise

. This role goes beyond routine testing -- it involves

research and innovation

, developing new methodologies, and contributing to advanced security solutions.

Key Responsibilities

Research & Development (R&D)

: Investigate emerging cyber threats, attack techniques, and security tools; design innovative defense mechanisms.

Vulnerability Assessment

: Conduct in-depth analysis of applications, networks, and server-side systems to identify weaknesses.

Penetration Testing

: Perform ethical hacking simulations, exploit vulnerabilities, and propose remediation strategies.

Server-side security

: Harden Linux/Windows servers, APIs, and databases against evolving threats.

Tool Development

: Create or customize scripts and tools for advanced penetration testing and automation.

Knowledge Sharing

: Publish technical papers, contribute to internal research repositories, and mentor junior team members.

Collaboration

: Work with cross-functional teams to integrate security into product design and R&D projects.
Required Skills

Certified Ethical Hacker (CEH)

credential (mandatory). Strong

server-side knowledge

: Linux/Windows administration, web servers (IIS, Apache, Nginx), databases.

Security tools

: Metasploit, Burp Suite, Nmap, Nessus, Wireshark, OWASP ZAP.

Programming/Scripting

: Python, Bash, PowerShell, or C# for exploit development and automation.

Networking expertise

: TCP/IP, firewalls, IDS/IPS, VPNs.

R&D mindset

: Ability to explore new vulnerabilities, design proof-of-concepts, and innovate beyond standard practices.
Qualifications

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.

2+ years of professional experience

in VAPT, ethical hacking, or cybersecurity R&D. CEH certification (mandatory); OSCP or other advanced certifications are a plus. Exposure to cloud security (AWS, Azure, GCP) desirable.
Job Type: Full-time

Work Location: In person