VAPT Manager - CRTO Certified

Job Title : Deputy Manager / Manager – VAPT

Location : Mumbai / Bangalore

Experience : 5+ Years

Certification : CRTO (Certified Red Team Operator) – Mandatory

Job Description :

We are seeking an experienced Deputy Manager / Manager – VAPT (Vulnerability Assessment and Penetration Testing) professional with a strong background in offensive security and red teaming. The ideal candidate will lead and execute VAPT engagements, identify vulnerabilities across applications, networks, and infrastructure, and provide actionable insights to strengthen overall security posture.

Key Responsibilities :

Lead and perform Vulnerability Assessment and Penetration Testing of web, mobile, network, cloud, and infrastructure environments.

Plan and execute Red Teaming exercises , leveraging CRTO expertise for advanced adversarial simulations.

Identify, exploit, and report security weaknesses, ensuring detailed technical and executive-level reporting.

Collaborate with SOC, IR, and Blue Team units to validate and improve detection and response capabilities.

Develop and maintain custom scripts and tools to automate repetitive testing tasks.

Stay updated on emerging attack techniques, vulnerabilities, and security trends.

Support client engagements, manage project timelines, and ensure deliverables meet quality and compliance standards.

Mentor junior team members and contribute to building a strong offensive security capability.

Required Skills & Experience :

Minimum 5 years of experience in VAPT, Red Teaming, or Offensive Security.

CRTO certification is mandatory (CRTO / CRTO II preferred).

Strong understanding of MITRE ATT&CK framework, TTPs , and adversarial simulation.

Proficiency in tools such as Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, Wireshark, and custom exploit frameworks.

Experience in Active Directory exploitation, privilege escalation, lateral movement, and post-exploitation techniques.

Solid knowledge of network protocols, web application security, and cloud security testing (AWS / Azure / GCP) .

Excellent analytical, reporting, and communication skills.

Prior experience in client-facing roles or consulting environments preferred.

Education :

Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

Additional certifications such as OSCP, OSCE, OSEP, or similar are a plus.