Security Engineer – VAPT / Penetration Testing

Designation: Security Engineer – VAPT / Penetration Testing

Preferred Experience: 2+ Years Job Summary: We are looking for a hands-on

Security Engineer – VAPT / Penetration Testing to join our team full-time. You will be responsible for identifying, validating, and helping remediate security vulnerabilities across our external infrastructure, web applications, APIs, and cloud environment. This is a practical security role. We are looking for someone who enjoys breaking things, understanding how vulnerabilities can be chained together, and working closely with developers to get them fixed.

Key Responsibilities:

• Perform regularexternal penetration testing of public-facing infrastructure.
• Conductweb application and API security testing.
• Identify vulnerabilities involving:
• Authentication and session management
• Authorization and access control / IDOR
• Injection vulnerabilities
• XSS
• SSRF
• File upload vulnerabilities
• Business-logic flaws
• API security issues
• Rate-limit and abuse scenarios
• Perform network and infrastructure reconnaissance and vulnerability validation.
• Review exposed services, ports, subdomains, DNS, SSL/TLS and other external attack surfaces.
• Perform basicAWS/cloud security assessments.
• Use automated scanners where appropriate, but manually validate findings.
• Develop proof-of-concepts to demonstrate security impact.
• Prepare clear technical vulnerability reports with severity, evidence, impact and remediation recommendations.
• Work directly with developers to explain vulnerabilities and recommended fixes.
• Retest vulnerabilities after remediation.
• Maintain an inventory of the organization's external attack surface.
• Help establish repeatable security testing processes and tooling.
• Monitor emerging vulnerabilities and assess whether they affect our infrastructure or applications.

Required Skills

• 1–3 years of practical experience in penetration testing, VAPT, application security or offensive security.
• Strong understanding ofOWASP Top 10.
• Hands-on experience withBurp Suite.
• Good understanding of HTTP/HTTPS, REST APIs and web application architecture.
• Good Linux and networking fundamentals.
• Experience with tools such as:
• Burp Suite
• Nmap
• Kali Linux
• ffuf / Gobuster
• SQLMap
• Wireshark
• Metasploit
• Ability to manually validate vulnerabilities rather than relying solely on automated scanners.
• Ability to write clear and technically accurate security reports.
• Good communication skills and ability to work with software developers

Nice to Have :

• OSCP, eJPT, PNPT, CEH or equivalent practical experience.
• Experience testing AWS environments.
• Experience with GraphQL APIs.
• Mobile application security testing.
• Source-code review.
• Experience with CI/CD security tooling.
• Bug bounty experience.
• CTF / Hack The Box / TryHackMe experience.
• Experience with Python, Bash or another scripting language.

Company Overview: Aventior is a leading provider of innovative, end-to-end technology solutions, empowering businesses across diverse industries to solve complex challenges and accelerate growth. We harness the power of cutting-edge technologies such as

artificial intelligence (AI), machine learning (ML), MLOps, and DevOps to build scalable, future-ready solutions that drive measurable business outcomes. Our expertise extends across the entire data lifecycle. We offer comprehensive data development and management services, including

cloud data architecture, universal data models, Data Transformation & ETL, data lakes, user management, Analytics & visualization, and

automated data capture for unstructured and semi-structured sources such as scanned documents. These capabilities enable organizations to unlock the full value of their data and make faster, more informed decisions. At Aventior, our strength lies in combining

deep industry expertise with

advanced technical capabilities . Our teams work closely with clients to design and deliver tailored solutions that align with their unique business needs—whether it’s optimizing operations, enhancing customer experiences, or driving strategic decision-making. We bring a

holistic, cross-industry perspective to every engagement, supported by a strong foundation in

design, implementation, innovation, migration, and ongoing support . With a

global delivery model , a

multi-country presence , and a team of highly skilled professionals, Aventior is well-positioned to deliver consistent, high-quality outcomes at scale.