Kelly Services logo

Vulnerability Assessment and Penetration Testing (VAPT) Engineer

Kelly Services

Boston, MA · HybridFull-time$100–145K/yrSeen todaySeen in employer's feed today

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

At a glance

Compensation
$100–145K/yr
Location
Boston, MAHybrid
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

CISSP CertificationOSCP Certification

Job overview

The VAPT Engineer identifies security vulnerabilities and strengthens the security of applications, systems, and platforms. The hybrid role conducts hands-on assessments across web applications, APIs, and mobile platforms, manages VAPT tools, and provides actionable recommendations to reduce risk. It also explores AI-assisted security testing and emerging threats.

Skills & qualifications

RequiredNice to have

Skills

Ethical HackingVulnerability AssessmentPenetration TestingVulnerability PrioritizationCommunicationTechnical ReportingNessusAppScanBurp SuiteNipperTrustwaveWiresharkKali LinuxMetasploitOWASPCVESecurity ControlsApplication ExploitsMobile SecurityAPI TestingManual TestingScriptingProgrammingAI Security Testing

Qualifications

Bachelor's in Computer Science or EquivalentCISSP CertificationOSCP CertificationGIAC GPEN, GAIPT, or GWAPT

Benefits

Medical Insurance
Dental Insurance
Vision Insurance
Paid Time Off
401(k) Match

Full job description

$100000 - $145000

We’re looking for an experienced VAPT Engineer to identify security vulnerabilities and strengthen the security of applications, systems, and platforms. This hybrid role focuses on hands-on security testing, managing VAPT tools, and providing actionable recommendations to reduce risk.

You’ll conduct assessments across web applications, APIs, and mobile platforms while exploring AI-assisted security testing and emerging threats.

Required Skills & Experience

  • Bachelor’s degree in Computer Science or equivalent experience.

  • CISSP and OSCP certifications required.

  • GIAC GPEN, GAIPT, or GWAPT preferred.

  • Strong understanding of ethical hacking, vulnerability assessments, and penetration testing.

  • Experience identifying, validating, and prioritizing vulnerabilities.

  • Strong communication and technical reporting skills.

Desired Skills & Experience

  • Experience with Nessus, AppScan, Burp Suite, Nipper, and Trustwave.

  • Familiarity with Wireshark, Kali Linux, and Metasploit.

  • Knowledge of OWASP, CVEs, security controls, and application exploits.

  • Experience with mobile security, API testing, and manual testing techniques.

  • Scripting or programming skills are a plus.

  • Experience using AI to enhance security testing or assess AI-powered applications.

Key Responsibilities

  • Conduct vulnerability assessments and penetration tests across applications, APIs, and platforms.

  • Manage VAPT tools, processes, and testing methodologies.

  • Document findings and recommend practical remediation steps.

  • Collaborate with technical teams to reduce security risks.

  • Stay current with emerging vulnerabilities, attack techniques, and security best practices.

The Offer

  • Medical, Dental, Vision insurance

  • Competitive base pay plus bonus

  • Generous PTO

  • 401k plus match

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.