Cybersecurity Engineer

About the role

KestrelSec is seeking a versatile Cybersecurity Engineer to strengthen client defenses and support offensive security initiatives. You will design secure architectures, conduct vulnerability assessments, and automate security processes across cloud and on‑prem environments.

Key responsibilities

• Design, deploy, and manage security frameworks including firewalls, IDS/IPS, SIEM and EDR solutions.
• Perform end‑to‑end vulnerability assessments and penetration testing, run automated scans, and lead remediation efforts.
• Develop Python, Bash or PowerShell scripts to automate security tasks and embed security checks into CI/CD pipelines.
• Ensure client environments comply with standards such as SOC 2, ISO 27001 or NIST.
• Assist the SOC team in incident investigation, root‑cause analysis and response.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• 2–5 years of experience in a security role (VAPT, IAM, SecOps or DevSecOps).
• Preferred certifications: CompTIA Security+, Network+, CCST, GSEC.
• Strong communication skills to explain risks to non‑technical stakeholders.

Required skills

• Python, Bash, PowerShell scripting.
• TCP/IP, network security protocols, Linux and Windows internals.
• Cloud security on AWS and Azure.
• Hands‑on experience with Nessus, Wireshark, Burp Suite, Nmap, Metasploit and Splunk.
• Familiarity with SAST/DAST tools and CI/CD pipeline integration.