Cybersecurity Engineer

We are seeking a dedicated professional to enhance our secure software development lifecycle (SDLC) by embedding security best practices throughout every phase of development. The ideal candidate will bring hands-on experience in DevSecOps, secure coding, and vulnerability management, with skills in vulnerability assessment and penetration testing (VAPT) considered a strong advantage. This role requires a proactive approach to integrating security measures and ensuring the highest standards in software security.

Key Responsibilities

- Conduct comprehensive vulnerability assessments and penetration tests on systems, networks, and applications to identify security weaknesses and potential threats.
- Review and validate AI-generated outputs, maintaining ownership of final deliverables regardless of AI assistance.
- Critically evaluate AI results to ensure they meet accuracy, completeness, logic, compliance, and business requirements.
- Utilize industry-standard tools such as Nessus, Nmap, Metasploit, Burp Suite, and others for both automated and manual security testing.
- Analyze assessment findings thoroughly and produce detailed reports outlining vulnerabilities, associated risks, and recommended remediation strategies.
- Collaborate with cross-functional teams to prioritize and remediate vulnerabilities based on severity and organizational impact.
- Stay current with emerging security threats, vulnerabilities, and best practices in cybersecurity.
- Participate in red team exercises to simulate cyber attacks, testing defensive measures and incident response capabilities.
- Contribute to the development and refinement of security policies, procedures, and guidelines aligned with industry standards.
- Mentor and support junior team members by providing training on security assessment methodologies and tools.

Required Qualifications

- Bachelor’s degree in Computer Science, Information Security, or a related field.
- Strong understanding of common security vulnerabilities, attack vectors, and exploitation techniques.
- Hands-on experience with security testing tools including Nessus, Nmap, Metasploit, and Burp Suite.
- Familiarity with various operating systems, networking protocols, and web technologies.
- Exceptional analytical and problem-solving skills with keen attention to detail.
- Effective communication skills, both verbal and written, with the ability to clearly explain technical findings to diverse audiences.
- Proven ability to use AI tools such as Claude (mandatory), ChatGPT, or similar to support work outputs, while exercising strong judgment and ownership of final deliverables.
- Demonstrated accountability for the accuracy, quality, and compliance of AI-assisted work.
- Successful completion of a Claude-based assessment as part of the hiring process.

Preferred Qualifications and Benefits

- Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalents are highly desirable.
- Strong business acumen with the ability to translate objectives into impactful security solutions.
- An ownership mindset with the capability to work independently and deliver results.
- Benefits include health insurance covering outpatient and inpatient care, separate maternity coverage, leave encashment, car support program, referral bonus, EOBI, bi-annual increments, provident fund, career growth opportunities, and performance bonuses. Benefits may vary by location.
- Multiple work locations available including Pakistan, India, UAE, Australia, and the USA.

VIDIZMO is an AI software company headquartered in Tysons, Virginia, specializing in products that enable organizations to search, analyze, redact, and act on unstructured data across video, audio, images, documents, and text. Our solutions serve over 100 customers across diverse sectors such as public safety, government, healthcare, financial services, education, legal, manufacturing, and energy. Many deployments operate in secure environments including on-premises, air-gapped, FedRAMP High, and CJIS Security Policy-aligned architectures. Our business model focuses on empowering partners and customers to succeed, with team members dedicated to supporting these relationships rather than direct sales.