VAPT Engineer

Job Description: VAPT (Vulnerability Assessment & Penetration Testing) Engineer

Location: Noida
Experience: 4+ Years
Employment Type: Full-Time

About the Role
We are looking for a skilled VAPT Engineer with a strong background in identifying, analyzing, and remediating security vulnerabilities across web applications, networks, APIs, and infrastructure. The ideal candidate will have hands-on experience in both manual and automated penetration testing techniques.

Key Responsibilities

• Conduct Vulnerability Assessments and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and cloud infrastructure
• Perform manual and automated security testing using industry-standard tools and methodologies (OWASP Top 10, SANS 25, PTES)
• Identify, document, and report security vulnerabilities with clear risk ratings and remediation recommendations
• Collaborate with development and DevOps teams to validate fixes and re-test post-remediation
• Perform network penetration testing, including internal and external network assessments
• Conduct configuration reviews, source code reviews, and threat modeling as needed
• Stay current with emerging threats, CVEs, exploits, and attack techniques
• Prepare detailed VAPT reports for technical and non-technical stakeholders
• Support compliance and audit requirements (ISO 27001, PCI-DSS, SOC 2, etc.)
• Participate in red team/blue team exercises as required

Required Skills & Qualifications

• Bachelor's degree in Computer Science, IT, or related field
• 4+ years of hands-on experience in VAPT / Application Security / Network Security
• Proficiency with tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, Wireshark, Kali Linux
• Strong understanding of OWASP Top 10, SANS 25, and common attack vectors (SQLi, XSS, CSRF, etc.)
• Experience with network security assessments and firewall/IDS-IPS testing
• Knowledge of scripting languages (Python, Bash) for tool customization is a plus
• Familiarity with cloud security (AWS/Azure/GCP) is an added advantage
• Relevant certifications preferred: CEH, OSCP, CompTIA Security+, or equivalent
• Strong analytical, problem-solving, and report-writing skills
• Ability to work independently and manage multiple assessments simultaneously

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CEH (Certified Ethical Hacker)
• CREST / GPEN / GWAPT (any one preferred)

Pay: ₹30,000.00 - ₹40,000.00 per month

Work Location: In person