About the Role
As a Lead Vulnerability Assessment and Penetration Testing (VAPT) Engineer, you will spearhead initiatives to evaluate, strengthen, and strategically enhance the security posture of the organization’s IT infrastructure, applications, and networks.
You will lead and mentor the VAPT team, oversee testing engagements, and ensure best practices are followed throughout the security lifecycle. Your role will be pivotal in driving high-impact security improvements by identifying and mitigating vulnerabilities through advanced assessments, penetration testing, and cross-team collaboration.
Responsibilities
Lead Vulnerability Assessments
- Oversee and guide comprehensive vulnerability assessments on internal and external systems, networks, and applications.
- Review, refine, and approve testing methodologies and tool usage to ensure consistency and accuracy.
Direct Penetration Testing Efforts
- Plan, coordinate, and execute complex penetration tests across IT infrastructure, applications, mobile platforms, and network components.
- Lead simulations of advanced cyber-attacks to validate security controls and identify exploitable weaknesses.
Analyze, Review & Report
- Ensure thorough analysis of findings, highlighting business risk impact alongside technical details.
- Deliver executive-level briefings and detailed technical reports with prioritized, actionable recommendations.
Team Leadership & Collaboration
- Mentor junior engineers, provide training, and foster a knowledge-sharing culture within the security team.
- Collaborate with development, operations, and compliance teams to drive remediation efforts and monitor progress.
Process & Documentation Management
- Maintain and improve VAPT documentation, methodologies, and reporting templates.
- Introduce process improvements to increase efficiency, accuracy, and testing coverage.
Continuous Security Advancement
- Stay updated on emerging threats, advanced exploitation techniques, and evolving security tools.
- Evaluate and integrate new tools and frameworks into the VAPT process to enhance effectiveness.
Eligibility
Educational Background
- Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Technical Skills
- Strong command of network protocols, operating systems, and web/mobile technologies.
- Proficiency with leading security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.
- Strong knowledge of IT security standards and frameworks including OWASP, NIST, and SANS Top 25, along with advanced exploitation techniques.
- Hands-on experience in manual penetration testing, complex scenario simulation, and advanced vulnerability exploitation.
Experience
- 7+ years of relevant experience in VAPT, including at least 2 years in a leadership or senior technical role.
Desired Eligibility
- Broad knowledge of security technologies across applications, databases, networks, servers, Active Directory, and endpoints.
- Experience with IoT/OT security and embedded protocol testing such as UART, I2C, SPI, JTAG, and SWD.
- Knowledge of radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR.
- Relevant certifications such as OSCP, CEH, or equivalent advanced credentials.
- Strong scripting and programming skills to develop custom exploits and automation tools.
- Active participation in security challenges such as Hack The Box and Capture The Flag (CTF) exercises.
- Familiarity with both open-source and commercial security tools such as Core Impact, Qualys, SQLmap, and OWASP ZAP.
- Willingness to travel for high-priority assessments and engagements.
Travel
Travel may be required across the country for project execution, monitoring, assessments, and coordination with geographically distributed teams, as and when required.
Communication
Submit a cover letter summarising your experience in relevant technologies and software, along with your resume and latest passport-size photograph.