As a VAPT Engineer, you will be responsible for designing, executing, and reporting on comprehensive vulnerability assessment and penetration testing engagements across cloud, web, mobile, and network environments.
Compensation
Rs 3600000 - Rs 7000000 (i.e INR 36-70 LPA)
Responsibilities
Conduct full-stack vulnerability assessments and penetration tests on web applications, microservices, APIs, and network infrastructure.
Implement and customize Automated Security Reconnaissance (ASR) tools to accelerate threat surface analysis and discovery.
Perform advanced Red Team exercises, simulating realistic adversary tactics, techniques, and procedures (TTPs) to evaluate detection and response capabilities.
Analyze and interpret vulnerability scan results, prioritizing findings based on risk and business impact.
Develop detailed exploitation proof-of-concepts (POCs) and provide actionable remediation guidance to stakeholders.
Design, develop, and maintain cyber resilience and recovery tooling on a distributed microservices platform to enable autonomous protection and recovery operations across Barclays.
Locations (2)
Knutsford, Cheshire, United Kingdom
Glasgow, Scotland, United Kingdom
Responsibilities
Design, develop, and maintain cyber resilience and recovery tooling
Work on a distributed microservices platform orchestrating complex workflows
Partner with infrastructure, security, and application owners to reduce recovery times
Ensure the security of Nebius's main public offerings by identifying and mitigating vulnerabilities, implementing best security practices, and collaborating with development teams.
Responsibilities
Build and maintain Application Security Posture Management (ASPM) at the Company scale
Automate and support SAST, SCA tools as part of CI/CD pipelines
Improving SAST, secrets detection rules
Identify, analyze, and remediate application security vulnerabilities
Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC)
Requirements
Nice to have: Security automation design and maintenance
Nice to have: Translating compliance and regulation requirements into technical specifications
Nice to have: Exploiting vulnerabilities in web applications, Linux kernels, containers, and networks
The Application Security Developer III is responsible for supporting the Application Security Program through application security testing, analyzing security tool output, documenting security findings, producing proof of concept exploits, and software development.
Compensation
$94,100.00 - $164,800.00
Responsibilities
Perform application security testing against web applications, web services, and mobile applications using BurpSuite and other tools
Analyze and determine exploitability of DAST and SAST output
Report security findings including proof of concept exploit, and remediation steps
Maintain and improve DAST/SAST tools, and processes
Perform security focused source code reviews
Requirements
Bachelor of Science in the field of computer science or software engineering or equivalent years of relevant work experience
Lead the group-level QA team that supports engineering across all SINGU products, staying hands‑on with test code and team leadership.
Locations (2)
Cracow, Poland
Warsaw, Mazovia, Poland
Compensation
Salary range 16 600 – 20 300 gross (UoP) or 20 000 - 24 500 PLN net on B2B + VAT
Responsibilities
Build and maintain automated tests across multiple products: web and API as the baseline, with depth in performance, accessibility or mobile depending on your strengths
Write tests in Playwright (TypeScript) and ship them through Jenkins / Bitbucket Pipelines
Set up new automation projects from scratch and review the team’s test code
Act as the safety net for ongoing refactoring and migration of a legacy PHP / .NET codebase
Drive adoption of AI tools and practices in QA workflows, from test generation to analysis