Vulnerability Assessment & Penetration Testing (VAPT) Specialist

Job Title:

About Augmont

Augmont is one of Indias most trusted integrated gold-tech platforms, offering seamless solutions from refinery to retail. We are pioneers in making gold accessible, affordable, and digital through offerings like Digi Gold, Gold SIPs, and EMI-based investments. Our products are integrated with leading fintechs, NBFCs, and jewellers to power India's gold investment ecosystem. As we strengthen our security posture, we are looking for an expert to lead vulnerability assessments and penetration testing across our platforms.

Role Summary

Key Responsibilities

• Vulnerability Assessments

  o Conduct security scans and assessments using both automated tools and manual techniques. o Analyze findings, prioritize risks, and deliver comprehensive reports with actionable insights.

• Penetration Testing

  o Perform internal and external penetration tests on networks, web applications, and APIs. o Execute test plans, simulate attack scenarios, and recommend remediation strategies.

• Security Analysis & Reporting

  o Analyze logs, incident data, and threat intelligence to detect vulnerabilities. o Prepare detailed reports and collaborate with teams to ensure timely resolution.

• Security Best Practices & Compliance

  o Contribute to security policies and frameworks. o Promote secure coding practices and ensure compliance with industry standards like OWASP and NIST.

• Collaboration & Communication

  o Work closely with engineering, DevOps, and product teams to address vulnerabilities and implement security measures. o Provide training, guidance, and reports to stakeholders at various levels.

• Tooling & Automation

  o Maintain, enhance, and customize security testing tool sets. o Explore new technologies and frameworks to improve testing efficiency.

Required Qualifications & Skills

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
  • 2+ years of experience in VAPT with deep understanding of network protocols, operating systems, web applications, and databases. • Hands-on expertise with tools such as Nessus, Nmap, Metasploit, Burp Suite, OWASP ZAP. • Strong knowledge of vulnerabilities, exploitation techniques, and security frameworks. • Experience with cloud security and mobile application security testing. • Knowledge of reverse engineering, malware analysis, and DevSecOps practices. • Familiarity with scripting languages like Python or Bash. • Understanding of OWASP, NIST, and other security frameworks. • Excellent documentation, problem-solving, and communication skills.

Preferred Qualifications

• Certifications such as OSCP, CEH, GPEN, or equivalent.
  • Experience with secure software development lifecycle processes. • Exposure to enterprise security tools, API security, and threat modeling.

What We Offer

• A critical role in safeguarding one of India’s leading gold investment platforms.
  • Opportunity to work with cutting-edge security technologies and tools. • A collaborative environment with cross-functional teams across fintech and digital ecosystems. • Learning opportunities and certification support to further enhance your security expertise.