Join our team as a Senior VAPT Engineer, where you will lead our Offensive Security efforts, focusing on vulnerability assessments and penetration testing.

About the Company

We are a cutting-edge cybersecurity firm committed to protecting our clients against emerging threats. Our passionate team works relentlessly to innovate offensive security strategies and ensure that vulnerabilities are identified and remediated before they can be exploited.

Role Overview

As a Senior VAPT Engineer, you will spearhead our Offensive Security initiatives, functioning as a vital member of our security team. Your expertise in web, mobile, and API penetration testing will help guide strategic improvements across our global Vulnerability Management program. Passion for staying ahead of security trends and dynamic problem solving will be crucial in this role.

Key Responsibilities

1. Web Application & API Penetration Testing

   • Conduct manual vulnerability assessments on web and API applications, following OWASP Top 10 standards and WSTG methodologies.
   • Perform comprehensive API security testing to expose vulnerabilities such as BOLA and authentication flaws.
   • Validate findings with manual testing techniques to ensure reliability.

2. Mobile Application VAPT (iOS & Android)

   • Assess security in mobile applications, leveraging tools for both binary and dynamic analysis.
   • Engage in runtime manipulation to bypass security measures and analyze data storage solutions.

3. Continuous Improvement and Technical Research

   • Stay abreast of latest security trends and create tools to enhance our testing capabilities.
   • Lead Red Team Campaigns to benchmark our detection and response capabilities.

4. Vulnerability Management & Governance

   • Manage the full lifecycle of vulnerability management with a focus on risk assessment and incident response support.
   • Collaborate with teams to ensure effective remediation of identified vulnerabilities.

5. Reporting & Remediation Guidance

   • Generate high-quality reports detailing vulnerabilities, exploitation steps, and risk assessments.
   • Conduct re-testing to verify remediation effectiveness.

Tech Stack

• Tools: Burp Suite, OWASP ZAP, Nmap, Tenable, Frida, Objection, SQLmap.
• Languages: Python, Bash, JavaScript.
• Platforms: AWS, Azure, GitHub Actions, in addition to solid experience in Linux (Kali/RHEL).

Required Technical Skills

• Manual Testing: Expert-level penetration testing experience.
• Penetration Testing Tools: Proficient with Burp Suite Professional, OWASP ZAP, Metasploit, Nmap, SQLmap, Wireshark, Postman.
• Vulnerability Management Tools: Experienced with Tenable, Tenable io, Qualys VMDR, Rapid7.
• Mobile Application Testing Tools: Familiarity with Frida, Objection, MobSF, ADB, Xcode.
• Frameworks: Strong knowledge of OWASP Top 10, OWASP Mobile Top 10, OWASP API Security Top 10.
• Scripting: Basic to intermediate skills in Python, Bash, or JavaScript.
• Operating Systems: In-depth knowledge of Linux (Kali/RHEL/Ubuntu) and basic understanding of Android/iOS internals.
• Cloud/DevOps: Experience with AWS/Azure Security Hub, Terraform, GitHub Actions.

Required Qualifications

• Experience: 4+ years in Vulnerability Assessment and Penetration Testing.
• Education: Bachelor’s in Computer Science, Information Security, or related field.
• Certifications: Preferred certifications include CEH, OSWE, Pentest+, eJPT/EWPT or similar in cybersecurity.

Soft Skills

• Strong written and verbal communication for technical reporting.
• Problem-solving mindset and ability to work under pressure.

• Competitive salary and performance-based incentives.
• Opportunities for professional development and certifications.
• Health insurance and wellness programs.
• Flexible working hours and remote work options.
• Collaborative environment and supportive team culture.