VAPT Specialist

Job Overview

We are looking for a knowledgeable VAPT Specialist with substantial practical experience predominantly in Network Penetration Testing. The role also covers Web and Mobile Application Penetration Testing, Vulnerability Assessment, and Red Team operations. The successful candidate will be responsible for identifying, validating, and exploiting security vulnerabilities within enterprise environments, followed by providing actionable remediation aligned with established security frameworks.

Key Responsibilities

• Execute both Internal and External Network Penetration Tests as a primary task.
• Perform Penetration Testing on Web Applications, APIs, and Mobile Applications.
• Carry out Vulnerability Assessments utilizing tools such as Tenable.sc and Nessus.
• Engage in Red Team and adversary simulation exercises to evaluate organizational detection and response capabilities.
• Manually validate and exploit vulnerabilities beyond automated scanning tools.
• Conduct operations including reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation.
• Analyze network infrastructure, Active Directory configurations, Windows and Linux systems, network services, and security controls.
• Identify vulnerabilities and evaluate their potential business and technical impacts.
• Prepare thorough technical reports and concise executive summaries.
• Offer clear, practical remediation recommendations.
• Retest vulnerabilities post-remediation to confirm fixes.
• Develop and update VAPT methodologies, testing checklists, and technical procedures.
• Adhere to established security frameworks such as NIST and OWASP along with industry-standard pen testing practices.
• Stay informed on the latest vulnerabilities, exploits, attack methods, and offensive security tactics.

Experience & Qualifications

• Minimum of 3 years hands-on experience in Vulnerability Assessment and Penetration Testing.
• Demonstrated expertise in Network Penetration Testing.
• Proficient in Internal & External Network Testing, Active Directory Security Testing, Web & API, and Mobile Application Penetration Testing, as well as Red Teaming and adversary simulation.
• Familiarity with Tenable.sc and Nessus tools preferred.
• Solid grasp of NIST, OWASP, and penetration testing methodologies.
• Strong knowledge of network protocols, Windows/Linux environments, Active Directory, authentication systems, and common network security controls.
• Extensive understanding of vulnerability exploitation and post-exploitation techniques.
• Excellent technical documentation and reporting capability.

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related discipline is preferred.
• Equivalent professional experience and relevant certifications may be considered as substitutes.