VAPT Lead

Responsibilities :

Lead and manage end-to-end Vulnerability Assessment and Penetration Testing (VAPT) activities across infrastructure components including networks, servers, endpoints, and cloud environments.

Design and implement VAPT strategies tailored to organizational risk profiles and compliance requirements.

Conduct thorough assessments to identify security vulnerabilities, simulate attack scenarios, and evaluate the effectiveness of existing security controls.

Collaborate with infrastructure, network, and application teams to validate findings and support remediation efforts.

Prepare detailed technical reports and executive summaries outlining identified risks, impact analysis, and recommended mitigation strategies.

Ensure VAPT activities align with industry standards such as ISO 27001, NIST, OWASP, and CIS Benchmarks.

Maintain up-to-date knowledge of emerging threats, tools, and techniques in the vulnerability assessment and penetration testing domain.

Technical and Professional Requirements :

Proven experience in conducting infrastructure-level Vulnerability Assessment and Penetration Testing (VAPT) across networks, servers, endpoints, and cloud environments.

Strong hands-on expertise with VAPT tools such as Nessus, Qualys, Nmap, Metasploit, Burp Suite etc.

In-depth understanding of network protocols, system configurations, and common vulnerabilities in enterprise IT environments.

Ability to identify, analyze, and prioritize security vulnerabilities, and provide detailed remediation guidance to technical teams.

Skills Required

Technology, Application Security, Vulnerability Management