Cybersecurity Engineer (VAPT & PCI DSS Compliance)

Job Title: Cybersecurity Engineer (VAPT & PCI DSS Compliance)

Company:

Location:

Experience:

Job Type:

Salary:

Variable Pay:

Employment Type:

Week Off: Alternate Week Off

Cybersecurity Engineer

This is a core role where you will perform security assessments, guide clients on compliance, and help build ZedFlys cybersecurity practice.

Key Responsibilities

• Perform

  Web, Network, API, and Mobile Vulnerability Assessment & Penetration Testing (VAPT)

• Identify, exploit, validate, and document vulnerabilities using industry tools
• Prepare

  end-to-end VAPT reports

  , including executive summary, technical details, PoC, and remediation
• Conduct

  PCI DSS gap assessments

  and support clients throughout compliance readiness
• Draft and maintain

  complete security documentation from scratch

  , including policies, SOPs, checklists, and evidence logs
• Execute internal/external

  security audits

  and risk assessments
• Assist clients in remediation and evidence collection for compliance
• Participate in client meetings, review sessions, and technical discussions
• Contribute to building

  internal security workflows, methodologies, and best practices

Required Skills

• Hands-on experience in

  VAPT

  (web, API, network)
• Strong understanding of

  OWASP Top 10, SANS Top 25

• Knowledge of

  PCI DSS v3.2.1 / v4.0

  (basic to intermediate)
• Ability to create PoC for vulnerabilities
• Strong writing and documentation skills

Tools Experience (Preferred)

• Burp Suite
• Nessus / Qualys
• Nmap, OWASP ZAP
• Metasploit, Kali Linux tools
• Wireshark

Qualifications

• Bachelor's degree in IT / Computer Science / Cybersecurity (preferred)
• Certifications like

  CEH, eJPT, OSCP, PCIP

  are a plus, not mandatory

Soft Skills

• Good communication and client-handling ability
• Strong analytical mindset
• Ability to work independently in a startup environment
• Ownership and willingness to learn

Send your cv at hr@zed.pe