Security Firewall jobs in Ahmedabad, Gujarat

Key Responsibilities:

• Perform VAPT engagements for web applications, APIs, mobile applications, internal and external networks, and cloud environments.
• Identify, validate, and assess vulnerabilities, misconfigurations, and business logic flaws.
• Prepare detailed assessment reports with technical findings, proof-of-concept evidence, risk ratings, business impact, and remediation recommendations.
• Communicate vulnerabilities and associated risks to technical and non-technical stakeholders.
• To perform remediation validation and re-testing to confirm the closure of identified issues.
• Stay updated with emerging threats, vulnerabilities, attack techniques, and current security trends.

Technical Skills :

• Strong understanding of networking concepts including TCP/IP, DNS, HTTP/HTTPS, routing, switching, VPNs, and firewalls
• Good knowledge of Operating Systems:o Linux (File system, Permissions, Basic commands) o Windows (Architecture, services, Registry basics)
• Strong understanding of web, mobile (Android/IOS) and API application architecture and security concepts.
• Knowledge of authentication and authorization mechanisms including sessions, cookies, JWT, OAuth, and SSO.
• Understanding of common attack vectors such as XSS, SQL injection, SSRF, CSRF, and IDOR.
• Understanding of REST, SOAP, GraphQL, and modern API architectures.
• Hands-on experience identifying vulnerabilities aligned with the OWASP Top 10 & SANS 25.
• Hands-on experience with tools: Burp Suite, Nessus, Metasploit, SQLmap, Postman, MobSF
• Strong knowledge in leveraging AI to automate VAPT processes and support security research and exploration.
• Strong troubleshooting skills with the ability to identify and resolve issues by understanding the client's environment.

Professional Skills

• Strong analytical and problem-solving abilities.
• Ability to think like an attacker while maintaining a risk-based approach.  Strong technical documentation and report-writing skills.
• Strong verbal and written communication skills.
• Ability to work independently as well as collaboratively within a team environment.
• Strong attention to detail and commitment to delivering high-quality assessments.
• Ability to manage multiple engagements and meet project deadlines.
• Eagerness to learn new technologies, attack techniques, and security methodologies.

Qualifications

• Education o Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field.

Experience

• 1-4 years of hands-on experience in VAPT, Application Security, Offensive Security, or related cybersecurity domains. Internship, freelance, bug bounty, research, or lab-based experience will be considered valuable.

Required Skills

• Web VAPT
• Mobile VAPT
• API VAPT
• Network VA

Certifications (Preferred / Added Advantage)

• Certified Ethical Hacker (CEH)
• eJPT (eLearnSecurity Junior Penetration Tester)
• BSCP (Burp Suite Certified Practitioner)
• CompTIA Security+  PNPT (Practical Network Penetration Tester)
• CJCA (Certified Junior Cybersecurity Analyst)
• eCPPT (eLearnSecurity Certified Professional Penetration Tester)
• CPTS (Certified Penetration Testing Specialist)  OSCP / OSCP+ (Offensive Security Certified Professional)

Important: This hiring is strictly for experienced full-time professionals. Freshers and internship candidates are not eligible.

Pay: ₹400,000.00 - ₹500,000.00 per year

Benefits:

• Health insurance
• Paid sick time
• Provident Fund

Application Question(s):

• How many years of hands-on VAPT experience do you have?
• Which VAPT tool have you used most extensively?
• Which authentication mechanisms have you worked with?
• Which operating system do you use for security testing?
• Do you hold any VAPT/security certification?
• What is your current CTC ?
• What is your expected CTC?
• What is your notice period?
• Are you comfortable working from Ahmedabad ?

Work Location: In person