Vulnerability Assessment & Penetration Testing (VAPT) Specialist

About the role

The Vulnerability Assessment & Penetration Testing (VAPT) Specialist will protect our digital assets by identifying, assessing, and validating security weaknesses across applications, networks, cloud, and endpoint environments. This role works closely with security and IT teams to ensure vulnerabilities are remediated and the organization’s security posture continuously improves.

Key responsibilities

• Conduct vulnerability assessments across network, application, database, cloud, and endpoint environments.
• Perform penetration testing on web applications, APIs, systems, and network infrastructure.
• Identify, validate, reproduce, and document security vulnerabilities and misconfigurations.
• Analyze scan results, prioritize findings based on risk and business impact, and produce detailed assessment reports.
• Validate remediation efforts through retesting and support vulnerability management tracking.
• Utilize security testing tools such as Burp Suite, Nmap, Metasploit, Nessus, OpenVAS, and follow industry‑standard methodologies.
• Support Red Team exercises and other cybersecurity assessment initiatives.
• Maintain testing documentation, evidence, procedures, and assessment records.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Security, IT or a related field.
• At least 2 years of hands‑on experience in vulnerability assessment, penetration testing, or security testing.
• Professional certifications such as CEH, eJPT, PNPT, Security+, OSCP, GPEN, or GWAPT are preferred.
• Strong understanding of OWASP Top 10, security testing frameworks, and vulnerability management processes.

Required skills

• Burp Suite
• Nmap
• Metasploit
• Nessus or OpenVAS
• API security testing
• Web application penetration testing
• Network penetration testing
• Vulnerability assessment and management
• Security scanning and validation
• Security testing methodologies and frameworks
• Vulnerability reporting and remediation tracking