Description

You own the security assessment and validation lifecycle for applications and infrastructure.

This role is hybrid.

Responsibilities

• Execute black-box, grey-box, and white-box penetration tests across web applications, APIs, internal systems, and mobile apps.
• Perform manual verification and risk assessment for identified vulnerabilities.
• Track and validate remediation efforts in partnership with IT and application teams.
• Conduct threat modeling and provide security recommendations during design and development phases.
• Prepare detailed vulnerability reports, including risk ratings and remediation guidance, for technical and non-technical audiences.

Required Skills

• 5+ years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), covering both application and infrastructure.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for tool development.
• Solid knowledge of TCP/IP, Firewalls, IDS/IPS, and network protocols.
• Familiarity with security standards including OWASP Top 10, SANS 25, and CVSS scoring.
• Experience with security testing platforms like Burp Suite, Metasploit, Nmap, or SQLmap.
• Understanding of Secure Software Development Lifecycle (SDLC) practices.
• Familiarity with cloud security environments (AWS, Azure, or GCP).

Preferred Skills

• Experience with Azure cloud security environments.

Key Skills

Education

Any Graduate