Security Engineer

Job Summary

Gartner s Information Security Attack Surface Management team is looking for a high-performing, self-driven, and motivated team player for the role of Information Security Engineer. The person in this role will assist with coordinating third-party penetration testing engagements and supporting the development of an internal penetration testing program. You will help identify vulnerabilities, support remediation efforts, and contribute to managing risks to Gartner s reputation, customers, and information technology environment.

The role will also contribute to security reporting, documentation, automation, and cloud-configuration reviews involving areas such as identity, network exposure, encryption, logging, and secure configuration standards.

This role provides an excellent opportunity to gain hands-on experience with enterprise security technologies while developing expertise in penetration testing and vulnerability management.

This role is a fixed 2:00 PM - 11:00 PM IST shift.

Responsibilities

• Support the coordination of third-party penetration testing engagements, including scheduling, scoping, documentation, communications, and tracking deliverables.
• Assist with reviewing penetration testing reports and documenting identified vulnerabilities and risks.
• Help validate security findings and determine their potential impact based on severity, exploitability, and affected assets.
• Work with application, infrastructure, cloud, and engineering teams to communicate remediation recommendations.
• Track vulnerabilities through remediation and assist with validating that security issues have been appropriately addressed.
• Support the development and maintenance of Gartner s internal penetration testing program, including procedures, documentation, testing standards, and reporting templates.
• Assist with security testing of web applications, APIs, networks, cloud environments, and other technology platforms under appropriate supervision.
• Use security tools to help identify vulnerabilities, misconfigurations, exposed services, and other security weaknesses.
• Help prepare security reports, dashboards, metrics, and presentations for technical and nontechnical stakeholders.
• Collaborate with Information Security, Information Technology, application development, and infrastructure teams to improve security practices.
• Maintain clear documentation of testing activities, findings, remediation status, and risk decisions.
• Stay informed about common vulnerabilities, security threats, penetration testing techniques, and industry best practices.
• Participate in security projects and other activities that improve Gartner s overall security posture.
• Develop technical and professional skills through hands-on experience, mentoring, training, and collaboration with experienced security professionals.

Requirements

1-3 years of experience in Information Security, vulnerability management, penetration testing, application security, networking, or a related field.

Must have:

• Basic understanding of information security principles, networking, operating systems, web applications, and common security vulnerabilities.
• Familiarity with the OWASP Top 10 and common web application security concepts.
• Familiarity with tools such as Nmap, Burp Suite, vulnerability scanners, or similar security technologies.
• Basic understanding of security concepts related to cloud environments, APIs, authentication, access control, and system configuration.
• Ability to review technical information, identify key risks, and document findings clearly.
• Strong written and verbal communication skills, with the ability to collaborate effectively with both technical and nontechnical teams.
• Strong attention to detail and organizational skills.
• High degree of integrity and professionalism, with a commitment to responsible and ethical security testing.
• Strong organizational skills and attention to detail.

Who you are

• Bachelor s degree or foreign equivalent degree in Computer Science or a related field required
• Excellent communication and prioritization skills.
• Able to work independently or within a team proactively in a fast-paced AGILE-SCRUM environment.
• Owns success - Takes responsibility for successful delivery of the solutions.
• Strong desire to improve upon their skills in software development, frameworks, and

Don t meet every single requirement We encourage you to apply anyway. You might just be the right candidate for this, or other roles.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.