Security VAPT Engineer

Security Vulnerability & Penetration Testing Engineer Full-time | Permanent | Hybrid - 3 days in office | Chicago, IL

Our client, a global leader in technology innovation and cybersecurity, is seeking a Security Vulnerability and Penetration Testing Engineer to strengthen the security posture of their enterprise systems and platforms. This role will serve as a technical authority on vulnerability assessments, penetration testing, and risk-based remediation, helping ensure the confidentiality, integrity, and availability of mission-critical infrastructure worldwide.

What You’ll Do:

• Conduct advanced security penetration testing across systems, platforms, and applications.
• Serve as the Subject Matter Expert (SME) for all VAPT (Vulnerability Assessment & Penetration Testing) functions.
• Own and optimize VAPT tools, processes, and best practices.
• Deliver detailed assessment reports with actionable remediation insights aligned to risk management principles.
• Stay current on the latest exploits, techniques, and adversary tactics, continuously refining methodologies.

Requirements & Experience:

• Bachelor’s degree in Computer Science or equivalent experience.
• Certifications: CISSP & OSCP (required), GIAC GPEN or GWAPT (preferred).
• Strong knowledge of VAPT concepts, ethical hacking, and risk management frameworks.
• Expertise with Nessus, AppScan, Burp Suite, Nipper, Trustwave, and attack tools such as Wireshark, Kali, and Metasploit.
• Familiarity with mobile platform security, vulnerability identification, and exploitation tools.
• Deep understanding of OWASP, CVE, and security control frameworks.
• Proficiency in scripting/programming languages is an asset (Python, PowerShell, Bash, etc.).
• Strong communication skills and ability to translate technical findings into business language.
• Self-starter with high attention to detail, composure under pressure, and passion for cybersecurity excellence.

Why This Role

This is an opportunity to join a globally recognized organization with a Cloud-first technology approach and a culture that values collaboration, integrity, and innovation. You’ll work alongside senior leaders in cybersecurity, engineering, and technology strategy, shaping global standards and practices in security resilience.