VAPT Manager

Job Title : VAPT Manager

Location : Coimbatore, Tamil Nadu

Experience : 5+ Years

Employment Type : Full-time

Department : Information Security / Cybersecurity

About the Role

We are seeking a highly skilled Vulnerability Assessment & Penetration Testing (VAPT) Manager with a minimum of 5 years of hands-on experience in application, network, cloud, and infrastructure security testing. The ideal candidate will lead security assessments, manage client engagements, guide junior team members, and ensure delivery of high-quality security reports.

Key Responsibilities

Technical Responsibilities

Conduct and oversee Vulnerability Assessments and Penetration Tests for web, mobile, network, API, cloud, and infrastructure environments.

Perform manual and automated testing to identify vulnerabilities and validate risks.

Develop exploitation strategies and PoCs where required.

Review and validate findings reported by team members for accuracy and severity.

Ensure alignment with security standards such as OWASP , NIST , SANS , MITRE ATT&CK , and ISO 27001 .

Collaborate with development, DevOps, and IT teams to support remediation strategies.

Maintain security tools, frameworks, and methodologies for consistent assessment quality.

Managerial & Leadership Responsibilities

Lead the VAPT team and manage end-to-end project execution.

Plan and allocate resources, timelines, and deliverables.

Conduct knowledge-sharing sessions and mentor junior security analysts.

Build and maintain strong relationships with clients; present findings and recommendations.

Prepare and deliver high-quality security reports and executive summaries.

Stay current with emerging threats, tools, and best practices.

Required Skills & Qualifications

Bachelor’s degree in Computer Science, Information Security, or related field.

5+ years of hands-on VAPT experience in web, mobile, network, cloud, and API security.

Strong knowledge of tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, Nikto, Acunetix, Kali Linux , etc.

Solid understanding of secure coding, common vulnerabilities, exploit techniques, and remediation.

Experience with SIEM, EDR, cloud platforms (AWS / Azure / GCP) is an advantage.

Relevant certifications preferred : OSCP, CEH, eJPT, OSWE, CRT, CISSP (optional) .

Excellent communication, reporting, and stakeholder management skills.

Nice-to-Have

Experience in security automation or scripting (Python, Bash, PowerShell).

Exposure to threat modeling and red-teaming methodologies.

Knowledge of DevSecOps workflows and CI / CD security integration.