VAPT Manager (Vulnerability Assessment & Penetration Testing) :

Location : Bangalore

Experience : 5+ Years

Joining Preference : Immediate Joiners Preferred

Job Summary :

We are seeking an experienced and highly skilled VAPT Manager to lead and manage Vulnerability Assessment and Penetration Testing initiatives across enterprise applications, networks, cloud environments, and infrastructure.

The ideal candidate should possess strong hands-on penetration testing expertise, deep knowledge of cybersecurity frameworks, and experience managing security assessments and remediation programs. OSCP (Offensive Security Certified Professional) certification is mandatory.

Key Responsibilities :

- Lead and manage end-to-end Vulnerability Assessment and Penetration Testing (VAPT) activities across web applications, APIs, mobile applications, cloud infrastructure, and networks.

- Conduct advanced penetration testing and security assessments to identify vulnerabilities and security weaknesses.

- Review and validate security findings, risk ratings, and remediation recommendations.

- Collaborate with development, infrastructure, cloud, and security teams to drive timely remediation of identified vulnerabilities.

- Develop and maintain VAPT methodologies, processes, standards, and reporting frameworks.

- Perform security reviews against industry standards such as OWASP Top 10, SANS Top 25, NIST, and CIS benchmarks.

- Manage external security assessments, audits, and third-party penetration testing engagements.

- Track vulnerability remediation progress and provide management reporting and risk visibility.

- Stay updated on emerging cyber threats, attack techniques, and security trends.

- Mentor and guide junior security professionals and penetration testers.

Required Qualifications :

- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

- Minimum 5+ years of experience in Vulnerability Assessment and Penetration Testing.

- Mandatory OSCP (Offensive Security Certified Professional) certification.

- Strong hands-on experience in web application, API, network, infrastructure, and cloud security testing.

- Expertise in identifying and exploiting vulnerabilities such as :

1. OWASP Top 10

2. Authentication & Authorization flaws

3. Business Logic vulnerabilities

4. Network security weaknesses

5. API security vulnerabilities

6. Cloud security misconfigurations

Technical Skills :

- Web Application Security Testing

- API Security Testing

- Network Penetration Testing

- Mobile Application Security Testing

- Cloud Security Assessment (AWS, Azure, GCP)

- Secure Code Review

- Threat Modeling

- Vulnerability Management

Security Tools :

- Burp Suite Professional

- Nmap

- Nessus

- Qualys

- Metasploit

- Wireshark

- OWASP ZAP

- Kali Linux

- Acunetix

- Nikto

Preferred Certifications :

- OSCP (Mandatory)

- OSWE

- CRTP

- CEH

- GPEN

- CISSP

- GWAPT

Preferred Experience :

- Experience leading VAPT teams or managing security assessment projects.

- Experience working in Banking, Financial Services, FinTech, Healthcare, or other regulated industries.

- Familiarity with DevSecOps, CI/CD security integration, and cloud-native security practices.

- Experience with container and Kubernetes security assessments is an added advantage.

Key Competencies :

- Strong analytical and problem-solving skills.

- Excellent communication and stakeholder management abilities.

- Ability to manage multiple security engagements simultaneously.

- Strong report-writing and presentation skills.

- Self-motivated, detail-oriented, and capable of working in a fast-paced environment.

Why Join Us? :

- Opportunity to work on enterprise-scale security programs.

- Exposure to cutting-edge cybersecurity technologies and methodologies.

- Collaborative and growth-focused work culture.

- Competitive compensation and career advancement opportunities.

Note :

- Immediate joiners or candidates who can join within 1530 days will be given preference.