Senior Cybersecurity Engineer - VAPT, Adversarial Simulation & Secure Architecture

About the role

A forward-looking cybersecurity team is looking for a Senior / Executive Cybersecurity Engineer focused on cyber architecture and development. You will strengthen the resilience of critical digital systems by leading Vulnerability Assessment and Penetration Testing (VAPT), building an in-house Adversarial Attack Simulation (AAS) capability and advising project teams on secure architecture and implementation. The role also explores the responsible use of AI in VAPT to improve testing depth, speed, consistency and insight.

Key responsibilities

• Lead end-to-end VAPT across applications, infrastructure, networks and cloud environments, identify exploitable weaknesses, validate business impact and help system owners remediate.
• Design and run safe, controlled Adversarial Attack Simulation exercises that emulate realistic threat actors and reveal gaps in prevention, detection, response and recovery controls.
• Prototype and evaluate AI-enabled approaches for VAPT, including test planning, attack-path analysis, vulnerability triage, evidence correlation, report generation and remediation guidance, with governance and human oversight.
• Advise digital projects through risk assessments, security architecture reviews and practical, risk-informed security solutions.
• Partner with architects, developers, project teams, system owners, vendors and security operations teams to embed secure-by-design practices.
• Track emerging vulnerabilities, attacker techniques, AI-enabled threats and security technologies, and turn them into improved testing methods, playbooks and defensive measures.
• Analyse trends across VAPT, AAS and other assurance activities, producing dashboards, remediation priorities and improvements to standards and playbooks.
• Communicate complex technical findings clearly to technical and non-technical stakeholders.

Required profile

• Degree in Cybersecurity, Computer Science, Information Technology or a related discipline, or equivalent relevant experience.
• At least 2 years of relevant experience in VAPT, offensive security, cybersecurity engineering or security consultancy; strong practical capability gained through labs, competitions, research or independent projects may also be considered.
• OSCP, a relevant CREST certification or an equivalent hands-on offensive security credential is preferred.
• Certifications such as CISSP, CISM, CRISC and CISA are advantageous.

Required skills

• Hands-on VAPT methodology, manual testing and common security assessment tools.
• Advantageous: adversary emulation, red/purple teaming, MITRE ATT&CK, and validation of security monitoring and incident response.
• Advantageous: familiarity with AI and machine learning concepts, large language models, AI-assisted security testing tools, scripting and security automation, and responsible AI use.
• Strong understanding of cloud configuration, network security, encryption and authentication protocols.