Principal Software Engineer - Cybersecurity (VAPT)

We are seeking an experienced Principal Software Engineer - Cybersecurity (VAPT) to lead Vulnerability Assessment and Penetration Testing (VAPT) activities across enterprise applications, cloud platforms, infrastructure, and IoT/OT environments. The ideal candidate will drive security testing strategies, identify vulnerabilities, recommend remediation measures, and mentor security engineers while working closely with development, DevOps, and infrastructure teams. Key Responsibilities Lead and execute comprehensive Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, mobile applications, cloud environments, and network infrastructure. Perform manual and automated penetration testing to identify security weaknesses and validate exploitability. Conduct source code reviews and secure architecture assessments. Support secure software development lifecycle (SSDLC) initiatives and DevSecOps integration. Assess cloud security posture across AWS, Azure, and GCP environments. Perform cybersecurity risk assessments and provide mitigation recommendations. Validate remediation efforts through re-testing and security audits. Develop security standards, guidelines, and testing methodologies. Mentor and guide cybersecurity engineers and VAPT analysts. Collaborate with stakeholders to ensure compliance with industry standards such as ISO 27001, NIST, OWASP, IEC 62443, and GDPR. Required Skills & Qualifications Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or related field. 10+ years of experience in Cybersecurity, with at least 5 years focused on VAPT. Strong expertise in: Web Application Security Testing API Security Testing Network Penetration Testing Cloud Security Assessment Mobile Application Security Secure Code Review Threat Modeling Hands-on experience with tools such as: Burp Suite Nessus Nmap OWASP ZAP Metasploit Wireshark Kali Linux Qualys Strong understanding of OWASP Top 10, CWE, CVSS, MITRE ATT&CK, and secure coding practices. Experience with CI/CD security integration and DevSecOps practices. Excellent analytical, problem-solving, and stakeholder management skills.