VAPT Engineer (L2 / L3)

We’re looking for a skilled and experienced VAPT Engineer (Level 2/3) with 8+ years of hands-on experience in vulnerability assessment and penetration testing across enterprise environments. In this role, you’ll lead advanced security testing efforts, simulate real-world attack scenarios, and guide remediation strategies to strengthen the organization’s security posture.

8+ years of hands-on experience

• Bachelor’s or Master’s in Computer Science, Cybersecurity, or a related field
• Strong understanding of network protocols, OS internals (Linux/Windows), and cloud platforms (AWS, Azure, or GCP)
• Hands-on scripting skills in Python, Bash, or PowerShell
• Experience with DevSecOps practices, CI/CD integration, and container security (Docker/Kubernetes)
• Solid grasp of secure coding principles, reverse engineering, and exploit development
• Relevant certifications such as OSCP, CEH, GPEN, LPT, or CISSP are highly preferred

• Lead penetration testing across web, mobile, cloud, and infrastructure (Black-box, Grey-box, White-box)
• Perform manual and automated vulnerability assessments using tools like Burp Suite, Nessus, Metasploit, Nmap, and custom scripts
• Conduct threat modeling and risk assessments for business-critical systems
• Document findings with clear, actionable remediation plans and deliver comprehensive technical reports
• Collaborate with DevOps, IT, and Security teams to prioritize and resolve vulnerabilities
• Mentor junior VAPT engineers and review their assessment reports for quality and accuracy
• Stay current with emerging threats, zero-day vulnerabilities, and modern attack techniques
• Ensure testing practices align with industry standards including OWASP, NIST, ISO 27001
• Participate in security audits, incident response activities, and red team engagements