Vapt Engineer

Roles & responsibilities

• Coordinate and govern end-to-end VAPT lifecycle across applications, infrastructure, and cloud

environments (internal and external).

• Review and track VAPT findings; ensure timely remediation and risk treatment as per severity.
• Assist in audit readiness by maintaining vulnerability closure evidence, remediation logs, and tracker

hygiene.

• Maintain the centralized VAPT tracker, risk register, Prepare monthly/quarterly MIS reports and

dashboards for reporting to IT, risk, and leadership teams.

• Assist in defining and updating VAPT governance processes, including scoping templates, test plans, and

closure evidence checklists.

• The role involves coordination between development, security, and compliance teams to institutionalize

secure SDLC, manage AppSec KPIs, and ensure third-party application risk oversight.

• Act as a liaison between security assessors and asset/application owners to ensure timely validation and

remediation of findings.

• Maintain a centralized vulnerability register with remediation owners, timelines, risk ratings, and

current status.

• Monitor SLA adherence for remediation based on criticality
• Support the governance of exception approvals or risk acceptances in alignment with the risk team or

CISO office regulatory expectations (e.g., RBI, SEBI, CERT-In).

Educational qualifications

Bachelors degree in Computer Science, IT, or related field.

Work experience

• 2–4 years of experience in cybersecurity with direct exposure to VAPT coordination or security

testing governance and managing the governance of the client’s Application Security (AppSec)

Program.