VAPT Manager

Job Title: VAPT Manager

Location: Coimbatore, Tamil Nadu

Experience: 5+ Years

Employment Type: Full-time

Department: Information Security / Cybersecurity

About the Role

We are seeking a highly skilled Vulnerability Assessment & Penetration Testing (VAPT) Manager with a minimum of 5 years of hands-on experience in application, network, cloud, and infrastructure security testing. The ideal candidate will lead security assessments, manage client engagements, guide junior team members, and ensure delivery of high-quality security reports.

Key Responsibilities

Technical Responsibilities

• Conduct and oversee Vulnerability Assessments and Penetration Tests for web, mobile, network, API, cloud, and infrastructure environments.
• Perform manual and automated testing to identify vulnerabilities and validate risks.
• Develop exploitation strategies and PoCs where required.
• Review and validate findings reported by team members for accuracy and severity.
• Ensure alignment with security standards such as OWASP , NIST , SANS , MITRE ATT&CK , and ISO 27001 .
• Collaborate with development, DevOps, and IT teams to support remediation strategies.
• Maintain security tools, frameworks, and methodologies for consistent assessment quality.

Managerial & Leadership Responsibilities

• Lead the VAPT team and manage end-to-end project execution.
• Plan and allocate resources, timelines, and deliverables.
• Conduct knowledge-sharing sessions and mentor junior security analysts.
• Build and maintain strong relationships with clients; present findings and recommendations.
• Prepare and deliver high-quality security reports and executive summaries.
• Stay current with emerging threats, tools, and best practices.

Required Skills & Qualifications

• Bachelors degree in Computer Science, Information Security, or related field.
• 5+ years of hands-on VAPT experience in web, mobile, network, cloud, and API security.
• Strong knowledge of tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, Nikto, Acunetix, Kali Linux , etc.
• Solid understanding of secure coding, common vulnerabilities, exploit techniques, and remediation.
• Experience with SIEM, EDR, cloud platforms (AWS/Azure/GCP) is an advantage.
• Relevant certifications preferred: OSCP, CEH, eJPT, OSWE, CRT, CISSP (optional) .
• Excellent communication, reporting, and stakeholder management skills.

Nice-to-Have

• Experience in security automation or scripting (Python, Bash, PowerShell).
• Exposure to threat modeling and red-teaming methodologies.
• Knowledge of DevSecOps workflows and CI/CD security integration.