VAPT Engineer

Only Experienced VAPT Engineer: 2-3 years

Company Description

DigiFortex, a CERT-In empaneled and ISO 27001:2022 certified organization, delivers cutting-edge cybersecurity solutions to strengthen governance, risk, and compliance for modern enterprises. Recognized for its expertise in Vulnerability Assessment and Penetration Testing (VAPT), cloud security, data privacy, and GRC consulting, DigiFortex caters to critical sectors including BFSI, Healthcare, Telecom, and IT/ITES. The companys team of certified professionals (CISSP, CISM, CEH, and more) combines in-depth technical knowledge with strategic leadership to address real-world risks and emerging threats. DigiFortex also has a pioneering approach to securing AI models against vulnerabilities through LLM Penetration Testing, staying at the forefront of cybersecurity innovation. Headquartered in Bengaluru, DigiFortex is dedicated to delivering tailored, scalable, and reliable solutions to keep organizations digitally secure and future-ready.

Role Description

This is a full-time, on-site position located in Bengaluru for a VAPT Engineer. The role involves conducting thorough Vulnerability Assessment and Penetration Testing (VAPT) of web applications, mobile applications, network infrastructures, and APIs. Responsibilities include identifying and exploiting security vulnerabilities, preparing detailed reports of findings, recommending actionable remediations, and collaborating with clients to improve their security posture. The VAPT Engineer will also contribute to threat modeling, risk analysis, and participate in the development and enhancement of testing methodologies.

Qualifications

• Strong hands-on experience with Vulnerability Assessment, Penetration Testing (VAPT), and basics of network and application security testing.
• Proficiency in tools like Burp Suite, Metasploit, Nessus, OWASP ZAP, and other scanning tools.
• Knowledge of secure coding principles and remediation techniques.
• Understanding of cybersecurity frameworks like OWASP Top 10 and MITRE ATT&CK.
• Experience in risk assessment, threat simulation, and identifying security gaps.
• Excellent analytical, problem-solving, and report-writing skills.
• Certifications such as CEH, OSCP, CISSP, or equivalent are a plus.
• Familiarity with new-age cybersecurity trends and techniques, including Cloud Security and LLM Penetration Testing, is advantageous.
• Ability to work collaboratively with stakeholders to implement security measures and improve resilience continuously.
• Bachelors or Master's degree in Computer Science, Information Security, or a related field is preferred.

Email: careers@digifortex.com