Vulnerability Assessment & Penetration Testing (VAPT) Engineer

Job Overview -

Were looking for a VAPT Engineer with 0–2 years of hands-on experience to execute vulnerability assessments and conduct penetration tests across diverse platforms , web, mobile, API, network, and cloud , using both automated tools and manual techniques. Your goal: proactively identify security weaknesses, demonstrate their impact via PoCs, and collaborate with stakeholders to ensure effective remediation.

Key Responsibilities –

• Conduct vulnerability assessments and penetration tests on web applications, mobile apps, APIs, network infrastructure, and cloud environments using tools such as Burp Suite, Nessus/OpenVAS, Metasploit, Nmap, and optionally Qualys
• Identify, analyze, and prioritize security weaknesses, misconfigurations, and coding issues, especially OWASP Top10 and SANS Top25 common findings
• Develop and execute proofofconcepts and exploit chains, demonstrating vulnerability impact.
• Produce detailed reports with risk assessment, remediation recommendations, and executive summaries for different audiences
• Collaborate with development, operations, and security teams to ensure vulnerabilities are mitigated or remediated.
• Keep updated on the latest CVEs, internal threat intelligence, and testing methodologies.
• Support and contribute to security strategy, policy development, and secure architecture reviews where applicable.

Key Requirements -

• 2years of hands-on experience in vulnerability assessment and penetration testing roles
• Proficiency with VAPT tools: Burp Suite, Nmap, Nessus/OpenVAS, Metasploit/Kali Linux
• Understanding of OWASP Top10, SANS Top25, and attacker behaviour (e.g. MITRE ATT\&CK)
• Basic scripting ability (Python, Bash, PowerShell) for customized testing or automation
• Knowledge of network/protocol fundamentals (TCP/IP, DNS, HTTP/S).
• Strong written and verbal communication skills to convey findings to technical and non-technical audiences.