Manager - BAS Cyber - VAPT - Gurgaon - 5+ years of experience

Key Responsibilities :

Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, and APIs to identify potential security risks.

Conduct Web Application Testing including static and dynamic analysis, identifying vulnerabilities such as SQL injection, cross-site scripting (XSS), and other OWASP Top 10 risks.

Test Mobile Applications (Android and iOS) to ensure compliance with security standards and identify vulnerabilities.

Perform API Testing to evaluate the security of RESTful and SOAP APIs.

Conduct risk assessments and security audits to identify vulnerabilities, potential threats, and recommend mitigations.

Collaborate with internal teams to implement secure coding practices and improve overall application security.

Assist in preparing detailed vulnerability reports, providing clear recommendations for remediation.

Keep up to date with the latest trends, tools, and methodologies in cybersecurity.

Must-Have Qualifications :

5+ years of experience in VAPT, Web Application Testing, API Testing, and Mobile Application Testing.

Hands-on experience with security tools such as Burp Suite, OWASP ZAP, Nessus, and Wireshark.

Familiarity with common vulnerabilities (OWASP Top 10) and security testing methodologies.

Strong knowledge of web technologies (HTML, CSS, JavaScript) and common mobile app platforms (Android, iOS).

Solid understanding of API security (REST, SOAP) and tools for testing API security.

Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or other relevant cybersecurity certifications are highly preferred.

Strong problem-solving skills and ability to work under pressure.