Security Compliance

Job Description Job Title- Security Engineer (VAPT & Remediation) Location- Pune | Hybrid Experience- 5–8 Years Primary Skills- VAPT / Penetration Testing, Web & API Security, Vulnerability Remediation, Cloud & Infrastructure Security ABOUT THE ROLE This is a hands-on security engineering role responsible for the complete vulnerability lifecycle—identifying vulnerabilities, validating their impact, implementing remediation, and confirming that fixes are effective. The role involves penetration testing and security reviews across applications, APIs, mobile applications, infrastructure, and cloud environments, along with direct remediation through application code and infrastructure configuration. ROLES AND RESPONSIBILITIES Security Analysis & Testing

• Plan and execute penetration tests across web applications, APIs, mobile applications, thick clients, and supporting infrastructure.

• Review application and infrastructure security covering authentication, authorization, session management, data flows, secrets management, network exposure, and cloud configurations.

• Identify vulnerabilities beyond automated scanners through manual testing, including business logic flaws, chained vulnerabilities, and privilege escalation.

• Execute and tune vulnerability scans across applications, hosts, and cloud environments.

• Triage, deduplicate, and prioritize findings based on exploitability, business impact, and CVSS.