Cyber Security Engineer (VAPT)

About the role

Mithra Consulting is looking for a motivated VAPT Professional to strengthen the security of our web applications, APIs, and network infrastructure. The role is based in Chennai and requires on‑site presence.

Key responsibilities

• Perform regular vulnerability assessments and penetration tests on web applications, APIs, and internal/external network systems.
• Identify security flaws such as SQL injection, XSS, authentication issues, and provide remediation recommendations.
• Assess API security, enforce best‑practice authentication, and mitigate common API vulnerabilities.
• Conduct internal and external network penetration tests and work with IT teams to improve defenses.
• Optionally evaluate mobile application security for Android and iOS platforms.
• Document methodologies, findings, and generate clear reports for technical and non‑technical stakeholders.
• Stay updated on emerging threats, tools, and industry standards.

Required profile

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 1‑3 years of hands‑on experience conducting VAPT assessments on web, API, and network environments.
• Relevant cybersecurity certification (e.g., CEH) and familiarity with OWASP, NIST frameworks.
• Strong analytical, problem‑solving, and communication skills.

Required skills

• Burp Suite
• OWASP ZAP
• Nmap
• Metasploit
• Python scripting
• Bash scripting
• Understanding of OWASP and NIST security standards

What we offer

• Opportunity to work on diverse security projects in a fast‑growing consultancy.
• Continuous learning through training and certifications.
• Collaborative environment with experienced security professionals.