VAPT Engineer

Job Description: VAPT Engineer

Role: Vulnerability Assessment and Penetration Testing (VAPT) Engineer

Job Summary

We are looking for a skilled VAPT Engineer to identify, assess, and manage security vulnerabilities across applications, networks, systems, and cloud environments. The ideal candidate should have hands-on experience in penetration testing, vulnerability assessment, security testing tools, and remediation validation.

Key Responsibilities

• Perform vulnerability assessments and penetration testing on web applications, APIs, networks, servers, and infrastructure.
• Conduct security testing to identify vulnerabilities, misconfigurations, and potential attack vectors.
• Use industry-standard tools to perform automated and manual security testing.
• Identify, validate, and prioritize vulnerabilities based on risk and business impact.
• Prepare detailed VAPT reports with findings, risk ratings, and remediation recommendations.
• Work with development, infrastructure, and security teams to remediate identified vulnerabilities.
• Conduct retesting to verify remediation effectiveness.
• Follow recognized security standards and methodologies, including OWASP, PTES, and NIST.
• Stay updated on emerging threats, attack techniques, and security vulnerabilities.

Required Skills and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
• Strong knowledge of web application, API, network, and infrastructure security testing.
• Experience with tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit, and OWASP ZAP.
• Good understanding of OWASP Top 10, CVEs, CVSS, and common attack techniques.
• Knowledge of operating systems, networking protocols, TCP/IP, Linux, and Windows.
• Familiarity with vulnerability management, security reporting, and remediation processes.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Relevant certifications such as CEH, OSCP, CompTIA PenTest+, eJPT, or GPEN.
• Exposure to cloud security testing across AWS, Azure, or GCP.
• Knowledge of mobile application security testing and secure code review.
• Familiarity with compliance and security standards such as ISO 27001 and PCI DSS.

Key Competencies

• Strong attention to detail and problem-solving skills.
• Ability to work independently and collaboratively with technical teams.
• Ability to communicate security risks and practical remediation measures effectively.

Pay: RM4,000.00 - RM5,000.00 per month

Benefits:

• Health insurance
• Maternity leave
• Opportunities for promotion
• Professional development

Application Question(s):

• Can you join within 30 days

Experience:

• VAPT : 1 year (Required)

Work Location: In person