VAPT Specialist

About the role

We are looking for an experienced VAPT Specialist to lead network penetration testing efforts while also handling web, API, and mobile application assessments. The role involves identifying, validating, and exploiting security vulnerabilities across our enterprise environment and delivering actionable remediation guidance.

Key responsibilities

• Perform internal and external network penetration testing as the primary focus.
• Conduct web application, API, and mobile application penetration testing.
• Execute vulnerability assessments using Tenable.sc and Nessus.
• Lead red‑team and adversary simulation exercises, covering reconnaissance to post‑exploitation.
• Validate findings manually, assess impact, and produce detailed technical and executive reports.
• Retest vulnerabilities after remediation and confirm fixes.
• Develop and maintain VAPT methodologies, checklists, and procedures aligned with NIST, OWASP and industry standards.
• Research emerging threats, exploits, and offensive techniques.

Required profile

• Minimum 3 years of hands‑on experience in vulnerability assessment and penetration testing.
• Proven expertise in network penetration testing, including Active Directory, Windows/Linux systems, and network services.
• Practical experience with internal & external testing, web/API, mobile apps, and red‑team simulations.
• Familiarity with Tenable.sc / Nessus is preferred.
• Strong understanding of NIST, OWASP and standard penetration testing methodologies.

Required skills

• Mobile Application Penetration Testing
• Nessus
• NIST
• Tenable.sc
• Red Teaming
• OWASP
• Network Penetration Testing
• Vulnerability Assessment