Associate Cybersecurity Engineer

Role Overview:

KestrelSec is looking for a high-potential Associate Cybersecurity Engineer to join our elite technical team. This is a foundational role for a career in high-end cybersecurity. You will bridge the gap between defensive stability and offensive agility, moving beyond running scans to actively analyzing threats, hardening infrastructure, and keeping our clients three steps ahead of adversaries.

Key Responsibilities:

• VAPT & Vulnerability Management: Execute end-to-end Vulnerability Assessment and Penetration Testing (VAPT). Perform regular automated scans and conduct manual deepdives to prioritize and oversee remediation.
• Security Architecture Support: Assist in the design, deployment, and management of robust security frameworks (Firewalls, IDS/IPS, SIEM, and EDR).
• Automation & DevSecOps: Develop custom scripts (Python, Bash, or PowerShell) to automate repetitive security tasks, integrate security checks into CI/CD pipelines, and build monitoring workflows.
• Compliance & Audit: Map technical findings to industry standards (SOC2, ISO 27001, or NIST) to ensure client environments are audit-ready. Technical Profile & Qualifications

Education:

• Bachelor's degree in Computer Science, Information Security, or a related discipline.
• Core Skills: Strong foundational understanding of TCP/IP networking, network security protocols, cloud security (AWS/Azure), and Linux/Windows internals.
• Tooling: Hands-on experience (via labs, projects, or prior work) with Nessus, Wireshark, Burp Suite, Nmap, Metasploit, or Splunk. Familiarity with SAST/DAST tools is highly preferred.
• Certifications (Preferred): Basic: CompTIA Security+, Network+, or CCST Cybersecurity.
• AI & Automation Exposure (Preferred): Working knowledge of Python and comfort working in modern IDEs (e.g., VS Code); exposure to agentic AI workbenches (e.g., Claude Code) and AI model assistants/chatbots for research and productivity; familiarity with data science and data analytics fundamentals, basic data pipeline concepts, and hands-on ability to consume and integrate APIs.