Information Security Engineer

About the role

ARM is seeking an Information Security Engineer with hands-on experience across VAPT, SOC, SIEM monitoring and enterprise IT security. This role combines offensive testing with defensive monitoring to provide risk-based security recommendations and remediation support.

What you'll do

• Conduct end-to-end VAPT across web apps, APIs, mobile apps, networks, servers and endpoints.
• Perform reconnaissance, exploitation, privilege escalation and post-exploitation activities within scope.
• Assess authentication, authorization, session management and API security for weaknesses.
• Conduct internal and external network penetration tests and vulnerability validation.
• Develop and tune SIEM use cases, dashboards and alert thresholds; investigate alerts.
• Support SOC operations with threat hunting, incident escalation and remediation validation.

What they're looking for

• 5-6+ years in information security with VAPT, SOC, SIEM and enterprise IT security experience.
• Hands-on testing skills across web, API, mobile, servers, endpoints and cloud environments.
• Experience with tools such as Burp Suite, Nmap, Nessus/Tenable, Metasploit, Kali Linux, OWASP ZAP, SIEM platforms.
• Strong ability to produce technical VAPT reports with remediation recommendations.
• Knowledge of security configuration reviews and incident investigation using SIEM/EDR data.
• Relevant certifications such as SSCP, CEH, OSCP or equivalents; CISSP or GIAC is a plus.

For applicants in Nigeria

• Location says Ikoyi, Lagos, Nigeria; eligibility listed as in_nigeria, so local applicants are supported.
• The listing does not specify a timezone requirement; confirm during interview.
• The listing does not state contractor vs employee terms; confirm during interview.
• Pay currency or range is not specified; confirm salary details during interview.
• The listing does not mention visa or work-authorization notes beyond Nigeria eligibility; confirm during interview.