VAPT Tester (Need Immediate Joiner)

Role & responsibilities

• Monitor & track security vulnerability in the public attack surface, Evaluate security posture in cloud WAF and other related cloud technologies.
• Track progress, prepare periodic reports and share upstream for review and approval.
• Assistance to Vendor Risk Assessment (VRA) cycle from scheduling to the closure of the report
• Conduct VAPT for Web Applications, Mobile Applications, APIs, Networks and Servers.
• Perform manual and automated penetration testing using Burp Suite, Nessus, Qualys, Nmap, Metasploit, OWASP ZAP and Kali Linux.
• Identify, validate and categorize security vulnerabilities based on CVSS/CVE and business impact.
• Perform security assessments covering OWASP Top 10, authentication, authorization, access control, configuration and business-logic vulnerabilities.
• Prepare VAPT reports with findings, risk ratings, evidence/PoC and remediation recommendations.
• Assistance in selection of vendors for services viz., VRA, VAPT, Red team exercises, Configuration reviews, AST/Source Code Reviews, other security assessments/reviews
• Coordinate with Application, Infrastructure and Security teams for remediation, re-testing and closure.
• Support internal/external audits, regulatory assessments and compliance requirements.

Interested candidates can share their updated resume on: [email removed]