Cyber Security Engineer (Mumbai)

About the role

RUDRA, a cybersecurity engineering firm, is looking for a hands‑on Cyber Security Engineer to join its Mumbai office. You will work on client VAPT engagements, internal product security, and incident response, delivering end‑to‑end assessments and remediation guidance.

Key responsibilities

• Perform VAPT across web applications, APIs, mobile apps, and infrastructure.
• Conduct white‑box audits with full access to source code, configurations, and live systems.
• Investigate security incidents through log analysis, lateral movement detection, and attacker reconstruction.
• Review source code for OWASP Top 10, business‑logic flaws, and cryptographic weaknesses.
• Audit firewall rules, network segmentation, and cloud security groups.
• Generate SBOMs, audit dependencies, and assess supply‑chain risk.
• Map external attack surface, monitor leaked credentials, and harden client environments.
• Write detailed technical reports with CVSS‑scored findings, PoCs, and remediation steps; present results to client leadership.

Required profile

• Proven experience delivering security assessments and written reports to clients.
• Ability to read and explain firewall rule sets.
• Strong analytical mindset and comfort with deep‑dive technical discussions.
• Excellent written and verbal communication for client presentations.

Required skills

• Vulnerability Assessment and Penetration Testing (VAPT)
• API security testing
• Web, mobile, and infrastructure security
• White‑box source code review (OWASP Top 10, business logic, cryptography)
• Firewall and network segmentation auditing
• Cloud security groups (AWS, Azure, GCP)
• SBOM generation and dependency auditing
• Supply‑chain risk assessment
• Incident investigation and log analysis
• CVSS scoring, PoC development, remediation guidance