VA PT Expert/Engineer

Were #Hiring at #Nokia | VA PT Engineer/Expert || Onsite || Gurugram

Short Description : The Senior VAPT Expert is responsible for the end-to-end security assessment lifecycle. This includes broad-spectrum Discovery Scans, deep-dive Infrastructure and Application Penetration Testing, and high-intensity Red Team/Assume Breach simulations.

What youll do:

• Conduct continuous asset discovery, automated vulnerability scanning, false positive analysis, and manage remediation tracking with re-testing.
• Execute deep-dive manual infrastructure, web, and mobile application penetration tests, including segmentation testing.
• Plan and execute "Assume Breach" simulations, complex attack chains, and APT simulations using MITRE ATT&CK.
• Create custom C2 channels and bypass EDR, Antivirus, and WAF controls to demonstrate advanced adversary capabilities.

Were looking for professionals who:

• 9+ years in Offensive Security/Red Teaming, specifically within Telecommunications or ISP environments.
• OSCP certification (minimum) and expert knowledge of the MITRE ATT&CK framework and NIST security standards.
• Proficiency in Kerberoasting, Pass-the-Hash, Golden Ticket, PowerShell/Bash scripting, and EDR bypass.
• Foundational knowledge of SS7, GTP, Diameter, Network Segmentation, Active Directory, and NOC/SOC workflows.

Surya Chirravuri | Sandeep Arora