Information Security Engineer

Job Summary

Information Security Engineer with 5–6+ years of hands-on experience across Vulnerability Assessment and Penetration Testing (VAPT), Security Operations Centre (SOC), SIEM monitoring, network security, endpoint security and enterprise IT infrastructure. Experienced in assessing and testing web applications, APIs, mobile applications, servers, databases, network devices, cloud environments and enterprise endpoints; identifying security weaknesses; validating exploitability; supporting remediation; and conducting retesting. Strong ability to combine offensive security testing with defensive monitoring and incident detection to provide practical, risk-based security recommendations.

Job Details

Information Security Engineer / VAPT & SOC Engineer

Conduct end-to-end VAPT across web applications, APIs, mobile applications, network infrastructure, servers, endpoints and enterprise IT assets.

Perform reconnaissance, enumeration, manual validation, exploitation, privilege escalation and post-exploitation activities within approved testing scope.

Assess authentication, authorization, session management, access control, business logic, input validation, API security, cryptography and configuration weaknesses.

Conduct internal and external network penetration tests covering network devices, exposed services, firewalls, VPNs, remote access and segmentation.

Perform vulnerability scanning and validation; prioritize findings based on severity, exploitability and business impact.

Produce technical VAPT reports containing evidence, risk ratings, affected assets, remediation recommendations and executive summaries.

Conduct remediation validation and retesting to confirm vulnerabilities have been effectively closed.

Support SOC operations through SIEM monitoring, alert investigation, event correlation, threat hunting and escalation of suspected incidents.

Develop, review and tune SIEM detection use cases, correlation rules, dashboards and alert thresholds.

Investigate suspicious endpoint, network and authentication activities using SIEM and EDR telemetry.

Perform security configuration reviews of firewalls, servers, endpoints, Active Directory, cloud resources and critical applications.

Collaborate with infrastructure, network, application development and IT operations teams to remediate vulnerabilities and strengthen controls.

Monitored SIEM, EDR and security infrastructure alerts and investigated potential threats and anomalous activities.

Performed log analysis across authentication, network, endpoint, application and security-device sources.

CORE COMPETENCIES

Application VAPT: Web Applications, APIs, Mobile Applications, Authentication & Business Logic

Network VAPT: Internal/External Infrastructure, Firewalls, Routers, Switches, VPNs and Network Services

Enterprise IT Security Assessment: Servers, Endpoints, Active Directory, Databases, Cloud and Security Devices

SOC Operations: Security Monitoring, Alert Triage, Incident Investigation, Escalation and Response Support

SIEM: Log Onboarding, Correlation Rules, Use Cases, Dashboards, Threat Detection and Tuning

Vulnerability Management: Scanning, Risk Rating, Remediation Tracking and Retesting

Penetration Testing: Reconnaissance, Enumeration, Exploitation, Privilege Escalation and Reporting

Threat Detection & Incident Response: IOC Analysis, Threat Hunting, Investigation and Evidence Preservation

Security Configuration Review: Firewall, OS, Network, Cloud, Endpoint and Application Controls

Security Reporting: Executive Findings, Technical Reports, Risk-Based Recommendations and Remediation Validation

Requirements

TECHNICAL SKILLS & TOOLS

VAPT / Offensive Security Expected / Preferred Experience :

Burp Suite, Nmap, Nessus/Tenable, Metasploit, Kali Linux, OWASP ZAP, SQLMap, Wireshark

Application Security: OWASP Top 10, OWASP ASVS, API Security, OWASP MASVS/MSTG, SAST/DAST

SOC / SIEM : CrowdStrike Falcon/SIEM, Microsoft Sentinel, Rapid 7, Splunk, QRadar or equivalent

EDR / XDR: CrowdStrike, Microsoft Defender, Sophos or equivalent

Network Security: FortiGate, Sophos, Cisco/enterprise firewalls, VPN, IDS/IPS, NAC, segmentation

Systems: Windows Server, Linux, Active Directory, Entra ID, databases and enterprise applications

Cloud Security: AWS/Azure fundamentals, IAM, logging, security groups and workload security

Scripting / Automation: Python, PowerShell and/or Bash

SELECTED VAPT RESPONSIBILITIES

Web Application and API Penetration Testing

Mobile Application Security Testing – Android/iOS

External and Internal Network Penetration Testing

Firewall and Network Device Security Assessment

Server and Endpoint Vulnerability Assessment

Active Directory and Identity Security Assessment

SIEM / SOC RESPONSIBILITIES

SIEM deployment support and onboarding of applications, servers, network devices, cloud services and security technologies.

Creation and tuning of security monitoring use cases for authentication, privilege escalation, malware, data exfiltration, suspicious network activity and configuration changes.

Threat hunting using endpoint, network, identity and application telemetry.

Investigation and correlation of alerts across SIEM, EDR/XDR, firewall and identity platforms.

SOC incident escalation, investigation support, root-cause analysis and lessons learned.

EDUCATION

B.Sc. / B.Tech. Computer Science, Cybersecurity, Information Technology or related discipline

PROFESSIONAL CERTIFICATIONS

Required / Preferred: SSCP, eJPT, CEH, OSCP or equivalent offensive-security certification

Preferred: CISSP, CCNA, GIAC, SC-900, CNSP, ITIL or equivalent security certification

Preferred: ISO/IEC 27001 or related information-security certification

Minimum qualifications

BA/BSc/HND

How to apply

Interested and qualified? Go to ARM Hold Co. on arm.seamlesshiring.com to apply

Similar open roles

• OT Officer / Application EngineerLonadek · Lagos
• Network Design EngineerIpNX Nigeria Limited · Lagos
• OSB Business Analyst – Telecom Integration (OSB to WSO2 MI Migration)Vennote Technologies Limited · Lagos
• IP Network EngineerLayer3 · Lagos
• Senior Network EngineerLayer3 · Abuja
• Android Engineer IICavista · Lagos