๐ง๐ต๐ถ๐ ๐ฟ๐ผ๐น๐ฒ ๐ถ๐ ๐ณ๐ผ๐ฟ ๐ผ๐ป๐ฒ ๐ผ๐ณ ๐๐ต๐ฒ ๐ช๐ฒ๐ฒ๐ธ๐ฑ๐ฎ๐'๐ ๐ฐ๐น๐ถ๐ฒ๐ป๐๐
๐ฆ๐ฎ๐น๐ฎ๐ฟ๐ ๐ฟ๐ฎ๐ป๐ด๐ฒ: ๐ฅ๐ ๐ฏ๐ฒ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ - ๐ฅ๐ ๐ณ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ๐ฌ (๐ถ๐ฒ ๐๐ก๐ฅ ๐ฏ๐ฒ-๐ณ๐ฌ ๐๐ฃ๐)
Experience: 9+ yrs
Location: Hyderabad
As a VAPT Engineer, you will be responsible for designing, executing, and reporting on comprehensive vulnerability assessment and penetration testing engagements across cloud, web, mobile, and network environments. Leveraging your expertise in Automated Security Reconnaissance (ASR) frameworks, you will uncover hidden attack vectors and validate zeroโday exploits, ensuring that all findings are actionable and align with industry best practices. Your role will also involve collaborating with development and security teams to remediate identified risks, maintain threat intelligence feeds, and contribute to the evolution of the organizationโs security posture. You will serve as a trusted advisor in the continuous improvement of security controls, delivering insights that influence product design, architecture resilience, and overall cyber risk strategy.
Requirements
๐๐ฒ๐ ๐ฅ๐ฒ๐๐ฝ๐ผ๐ป๐๐ถ๐ฏ๐ถ๐น๐ถ๐๐ถ๐ฒ๐
โข Conduct fullโstack vulnerability assessments and penetration tests on web applications, microservices, APIs, and network infrastructure.
โข Implement and customize Automated Security Reconnaissance (ASR) tools to accelerate threat surface analysis and discovery.
โข Perform advanced Red Team exercises, simulating realistic adversary tactics, techniques, and procedures (TTPs) to evaluate detection and response capabilities.
โข Analyze and interpret vulnerability scan results, prioritizing findings based on risk and business impact.
โข Develop detailed exploitation proofโofโconcepts (POCs) and provide actionable remediation guidance to stakeholders.
โข Collaborate with DevSecOps teams to integrate security testing into CI/CD pipelines and development workflows.
โข Mentor junior security analysts, conducting training sessions on vulnerability tools, exploitation techniques, and secure coding practices.
โข Maintain upโtoโdate knowledge of emerging threats, exploits, and security frameworks, updating testing methodologies accordingly.
โข Generate comprehensive reports and executive summaries that translate technical findings into clear, businessโrelevant insights.
โข Participate in incident response drills, providing expertise on breach containment, forensic analysis, and postโincident remediation.
๐ช๐ต๐ฎ๐ ๐ ๐ฎ๐ธ๐ฒ๐ ๐ฌ๐ผ๐ ๐ฎ ๐๐ฟ๐ฒ๐ฎ๐ ๐๐ถ๐
โข 9+ years of handsโon experience in vulnerability assessment, penetration testing, and red teaming across diverse technology stacks.
โข Deep expertise in Automated Security Reconnaissance (ASR) tools such as Burp Suite, Zap, and custom scripting.
โข Proficiency in exploiting web application vulnerabilities (SQLi, XSS, CSRF, OTN, SSRF) and infrastructure weaknesses (misconfigurations, privilege escalation).
โข Advanced knowledge of OWASP ASVS, NIST SP 800โ53, and CIS Controls, with proven ability to map findings to industry standards.
โข Strong programming prowess in Python, Bash, PowerShell, and scripting for automation and exploitation.
โข Excellent communication skills, able to translate complex technical concepts to nonโtechnical audiences and produce clear, actionable reports.
โข Experience in Red Team simulations, including threat modeling, attack choreography, and adversary emulation frameworks such as MITRE ATT&CK.
โข Demonstrated success in integrating security testing into CI/CD pipelines and SecOps workflows.
โข A proactive, continuous learning mindset with active participation in security communities, captureโtheโflag events, and vulnerability research.
โข A proven track record of mentoring junior analysts and fostering a collaborative security culture.