Role Overview :

As a Senior VAPT Engineer, you will serve as a critical guardian of our digital infrastructure, leading complex security assessments to identify and mitigate vulnerabilities before they can be exploited. You will work closely with cross-functional engineering teams, product stakeholders, and executive leadership to translate technical security findings into actionable business risk insights.

By spearheading deep-dive penetration testing and vulnerability management strategies, you will directly influence the security posture of our products, ensuring that our customers' data remains protected against an ever-evolving threat landscape. This role offers the autonomy to operate remotely while driving high-impact security initiatives across our global footprint.

Key Responsibilities :

- Lead end-to-end vulnerability assessment and penetration testing engagements across web, network, and emerging mobile app technologies to proactively secure our digital assets.

- Collaborate with software development teams to provide remediation guidance, ensuring that security best practices are integrated into the CI/CD pipeline.

- Conduct advanced threat modeling and security architecture reviews to identify systemic weaknesses before they manifest in production environments.

- Communicate complex security risks to non-technical stakeholders, enabling informed decision-making regarding risk acceptance and mitigation strategies.

- Mentor junior security analysts by sharing technical expertise and fostering a culture of continuous learning and security-first engineering.

- Stay ahead of emerging cyber threats and zero-day vulnerabilities, translating intelligence into defensive measures that protect our business outcomes.

Required Skillset :

- Demonstrated expertise in executing comprehensive VAPT programs, with a deep understanding of OWASP Top 10, SANS Top 25, and common attack vectors.

- Proven ability to perform manual penetration testing on complex architectures, complemented by proficiency in industry-standard security tools and automated scanning frameworks.

- Strong grasp of Cloud Security principles and the ability to secure infrastructure across major cloud platforms, ensuring configurations align with security benchmarks.

- Exceptional analytical and communication skills, with the ability to articulate technical vulnerabilities and their business impact to diverse audiences.

- Professional certifications such as OSCP, CISSP, or equivalent are highly valued as indicators of technical rigor and commitment to the cybersecurity domain.

- Ability to thrive in a remote-first environment, maintaining high levels of self-discipline, collaboration, and project ownership without direct supervision.

- A minimum of 5 to 15 years of hands-on experience in cybersecurity, specifically within penetration testing and vulnerability management roles.