Cybersecurity Testing Engineer

About the role

The Cybersecurity Testing Engineer will support the LISA early‑detection capability by performing regular security testing on the Authority’s digital assets, validating reported vulnerabilities, and simulating cyber‑attacks. The role also maintains the Authority’s Bug Bounty Programme, Attack Surface Management, and related testing tools, providing remediation recommendations to ensure robust security.

Key responsibilities

• Perform regular security testing on the Authority’s digital assets and validate reported vulnerabilities.
• Simulate cyber‑attacks and conduct security assessments for web, network, mobile, and cloud environments.
• Manage and triage the private Bug Bounty Programme, coordinating with project teams.
• Oversee VAPT scanning, track remediation status, and ensure timely fixes.
• Configure, tune, patch, upgrade, and maintain security testing tools, platforms, and services.

Required profile

• Minimum of 2 years of experience in cybersecurity testing, penetration testing, or vulnerability assessment.
• Hands‑on experience with security testing tools such as Kali Linux, Metasploit, Burp Suite, OWASP ZAP, and Nessus.
• Proven track record of conducting assessments on web applications, network infrastructure, mobile apps, or cloud environments.
• Strong analytical and problem‑solving abilities in a security testing context.
• Relevant certifications (e.g., CISSP, CEH, OSCP, GSEC) are preferred.

Required skills

• Kali Linux
• Metasploit
• Burp Suite
• OWASP ZAP
• Nessus

What we offer

• Competitive salary commensurate with experience and qualifications.