VAPT Specialist - Mumbai

Key Responsibilities :

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across:
• Web Applications
• APIs (REST, SOAP, GraphQL)
• Mobile Applications (iOS & Android)
• Perform both manual and automated security testing using industry-standard tools such as Burp Suite Pro, OWASP ZAP, Postman, and other relevant frameworks.
• Identify, analyze, validate, and exploit security vulnerabilities with accurate risk classification, business impact assessment, and proof-of-concept demonstrations.
• Prepare and deliver detailed technical reports outlining vulnerabilities, exploitation methodologies, and remediation recommendations, along with executive summaries for stakeholders.
• Collaborate closely with internal teams and clients during remediation cycles and retesting to ensure effective vulnerability closure.
• Stay updated with the latest security threats, vulnerabilities, exploits, and attack vectors, incorporating threat intelligence into testing methodologies.
• Ensure all assessments align with industry standards and frameworks such as OWASP, PTES, NIST, CIS, and PCI DSS.
• Maintain strict confidentiality, integrity, and ethical standards while handling sensitive client data.
• Manage and maintain vulnerability tracking systems, ensuring proper documentation and status updates.
• Lead onsite/offshore teams and drive end-to-end project execution, ensuring timely delivery and quality outcomes.

Education & Certifications

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Relevant industry certifications are highly preferred, such as:
• CEH (Certified Ethical Hacker)
• OSCP (Offensive Security Certified Professional)
• eJPT / eCPPT
• CREST, GPEN, or equivalent