VAPT Specialist

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for:
• Network infrastructure
• Web applications
• Mobile applications (Android / iOS)
• Databases
• Thick-client applications
• Conduct network penetration testing, web and mobile application testing, and wireless security assessments
• Perform configuration and security reviews for Operating Systems, Databases, Firewalls, Routers, Switches, and other infrastructure components
• Conduct threat analysis, source code reviews (preferred), and security assessments
• Identify vulnerabilities, exploitation paths, and provide risk-based remediation recommendations
• Prepare detailed technical reports and executive-level presentations
• Ensure timely delivery of status updates, audit reports, and client deliverables
• Act as a client-facing security consultant, presenting findings to technical teams, management, and leadership
• Manage multiple VAPT projects simultaneously, ensuring timely and high-quality delivery
• Assist in scoping engagements, effort estimation, and project planning
• Lead engagements and mentor junior team members, reviewing their work and supporting their development
• Develop scripts, tools, and methodologies to enhance testing capabilities
• Research and stay updated on new vulnerabilities, attack vectors, and security threats
• Support Red Team / Blue Team exercises and security assessments
• Travel to client locations as required

Skills Required

• Experience: 2 to 10 years of relevant experience in VAPT / Penetration Testing / Security Testing
• Qualification: UG: B.E / B.Tech / BCA - Computer Science / IT / Cyber Security, PG (Preferred): M.E / M.Tech / MCA - Computer Science / IT / Cyber Security
• Knowledge & Skills: Strong understanding of VAPT concepts and methodologies, Hands-on experience with Network Security Testing, Web Application Security Testing, Mobile Application Security Testing, Infrastructure Security Testing, Strong knowledge of TCP/IP and Networking concepts, OS, Firewall, Database, and Network Security, Familiarity with OWASP Top 10, CWE / SANS Top 25, CIS Benchmarks, Experience with Kali Linux, Burp Suite, Nessus, Nmap, Metasploit, Wireshark, SQLMap, Other security testing tools, Experience in manual penetration testing techniques (mandatory), Strong understanding of attacker tools, tactics, and procedures
• Preferred Certifications: CEH (Certified Ethical Hacker), OSCP (Preferred), CISSP, CISA, eJPT / eCPPT, CREST (Preferred)
• Key Competencies: Strong client-facing and consulting skills, Ability to manage multiple projects, Team handling and mentoring skills (for senior roles), Strong analytical and problem-solving abilities, Excellent report writing and presentation skills