Associate Cybersecurity Engineer

About the role

KestrelSec is seeking a high‑potential Associate Cybersecurity Engineer to join its elite technical team. This foundational position bridges defensive stability and offensive agility, moving beyond routine scans to active threat analysis, infrastructure hardening, and proactive client protection.

Key responsibilities

• Execute end‑to‑end vulnerability assessment and penetration testing (VAPT), including automated scans and manual deep‑dives, and drive remediation.
• Support security architecture design, deployment and management of firewalls, IDS/IPS, SIEM and EDR solutions.
• Develop and maintain automation scripts (Python, Bash, PowerShell) to integrate security checks into CI/CD pipelines and build monitoring workflows.
• Map technical findings to compliance frameworks such as SOC 2, ISO 27001 or NIST and prepare audit‑ready documentation.
• Assist with cloud security hardening for AWS and Azure environments and maintain Linux/Windows host security.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Strong foundational knowledge of TCP/IP networking, network security protocols and operating‑system internals.
• Hands‑on experience with security tools through labs, projects or prior work.
• Basic certifications such as CompTIA Security+, Network+ or CCST Cybersecurity are preferred.

Required skills

• Python, Bash, PowerShell scripting.
• Vulnerability scanning tools: Nessus, Nmap, Wireshark.
• Penetration testing frameworks: Metasploit, Burp Suite.
• Security information and event management: Splunk, SIEM platforms.
• Cloud platforms: AWS, Azure.
• Operating systems: Linux, Windows.
• Understanding of SAST/DAST tools and CI/CD integration.