Manager - BAS Cyber - VAPT - Gurgaon - 5+ years of experience

Key Responsibilities:

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, and APIs to identify potential security risks.

• Conduct Web Application Testing including static and dynamic analysis, identifying vulnerabilities such as SQL injection, cross-site scripting (XSS), and other OWASP Top 10 risks.

• Test Mobile Applications (Android and iOS) to ensure compliance with security standards and identify vulnerabilities.

• Perform API Testing to evaluate the security of RESTful and SOAP APIs.

• Conduct risk assessments and security audits to identify vulnerabilities, potential threats, and recommend mitigations.

• Collaborate with internal teams to implement secure coding practices and improve overall application security.

• Assist in preparing detailed vulnerability reports, providing clear recommendations for remediation.

• Keep up to date with the latest trends, tools, and methodologies in cybersecurity.

Must-Have Qualifications:

• 5+ years of experience in VAPT, Web Application Testing, API Testing, and Mobile Application Testing.

• Hands-on experience with security tools such as Burp Suite, OWASP ZAP, Nessus, and Wireshark.

• Familiarity with common vulnerabilities (OWASP Top 10) and security testing methodologies.

• Strong knowledge of web technologies (HTML, CSS, JavaScript) and common mobile app platforms (Android, iOS).

• Solid understanding of API security (REST, SOAP) and tools for testing API security.

• Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or other relevant cybersecurity certifications are highly preferred.

• Strong problem-solving skills and ability to work under pressure.