Job Title : Deputy Manager – VAPT (Vulnerability Assessment & Penetration Testing)
Location : Mumbai / Bangalore
Experience : 5+ Years
Department : Information Security / Cyber Risk
Joining : Early joiners preferred
About the Role :
We are looking for a skilled Deputy Manager – VAPT to lead and execute vulnerability assessments and penetration testing engagements across applications, networks, and infrastructure. The ideal candidate will have a strong understanding of security testing methodologies, exploit development, and risk reporting, along with the ability to communicate technical findings to non-technical stakeholders.
Key Responsibilities :
- Conduct Vulnerability Assessments and Penetration Tests on web, mobile, network, and infrastructure components.
- Identify, exploit, and document vulnerabilities, along with providing actionable remediation recommendations.
- Perform threat modeling and risk analysis to assess the impact of identified vulnerabilities.
- Collaborate with IT, application, and infrastructure teams to validate and track remediation efforts.
- Ensure testing and reporting are aligned with industry frameworks and compliance standards (OWASP, OSSTMM, NIST, ISO 27001, etc.).
- Manage security assessment projects end-to-end , ensuring timely delivery and high-quality outputs.
- Support red team exercises , secure code reviews , and configuration reviews as required.
- Prepare and present detailed technical and executive reports for stakeholders and management.
- Stay updated with emerging vulnerabilities, attack vectors, and security tools.
Required Skills & Experience :
5+ years of experience in Vulnerability Assessment and Penetration Testing .Hands-on experience with tools such as Burp Suite, Metasploit, Nmap, Nessus, Qualys, OWASP ZAP, Kali Linux , etc.Proficiency in manual testing techniques, exploit scripting, and report writing.Strong understanding of network protocols, web technologies, and application security concepts.Experience in testing cloud environments (AWS, Azure, GCP) will be a plus.Ability to communicate complex security issues to non-technical stakeholders.Preferred Certifications :
OSCP / CEH / GPEN / GWAPT / eCPPT or equivalent certifications.ISO 27001 or similar InfoSec certifications will be an added advantage.Key Attributes :
Strong analytical and problem-solving abilities.Excellent communication and documentation skills.Ability to manage multiple assessments simultaneously.Early joiners will be given preference.