Job Title: VAPT Testing Engineer (Vulnerability Assessment & Penetration Testing) Engineer

Company: Asmadiya Technologies

Experience: 5+ Years

Location: Pune (Hinjewadi Phase3)

Industry: IT Services / AI / Cloud Transformation

Employment Type: Full time

About Us

Asmadiya Technologies is a fast-growing technology company with a team of 85+ professionals delivering cutting-edge solutions in AI, Cloud Transformation, Enterprise Applications, Cybersecurity,

and Digital Engineering. We partner with global clients to build secure, scalable, and innovative technology solutions.

We are looking for an experienced VAPT Engineer who is passionate about cybersecurity and has strong expertise in identifying, assessing, and mitigating security vulnerabilities across web applications, APIs, mobile applications, networks, and cloud environments.

Role OverviewAs a VAPT Engineer, you will be responsible for conducting comprehensive Vulnerability Assessments and Penetration Testing (VAPT) to identify security risks, validate vulnerabilities, and recommend remediation strategies. You will work closely with development, DevOps, cloud, and infrastructure teams to strengthen the security posture of enterprise applications and cloud environments.

Key ResponsibilitiesConduct Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs,

mobile applications, networks, and cloud infrastructure.

Perform manual and automated penetration testing to identify security vulnerabilities.

Assess applications against the OWASP Top 10, SANS Top 25, and other industry-standard security frameworks.

Execute network security assessments,



wireless security testing, and infrastructure penetration testing.

Perform API security testing using industry-standard tools.

Identify security weaknesses and provide detailed remediation recommendations.

Prepare comprehensive VAPT reports, including risk analysis and mitigation plans.

Validate remediation efforts through re-testing and verification.

Collaborate with development and DevOps teams to implement secure coding practices.

Participate in secure architecture reviews and threat modeling exercises.

Stay updated with emerging cybersecurity threats, vulnerabilities, and attack techniques.

Required Skills & Qualifications5+ years of hands-on experience in Vulnerability Assessment & Penetration Testing.

Strong knowledge of Web Application Security and API Security Testing.

Experience in Network Penetration Testing and Infrastructure Security Assessment.

Hands-on experience with industry-standard security tools, including:

Burp Suite Professional

OWASP ZAP

Nessus

Nmap

Metasploit

Nikto

Wireshark

SQLMap

Strong understanding of

OWASP Top 10

CVSS

CWE

MITRE ATT&CK; Framework

Secure SDLC

Knowledge of authentication mechanisms including OAuth 2.0, JWT, SAML, and Multi-Factor

Authentication (MFA).





Experience in Linux and Windows security assessments.

Familiarity with cloud security (AWS, Azure, or GCP).

Strong scripting skills using Python, Bash, or PowerShell for security automation.

Excellent analytical, troubleshooting, and report-writing skills.

Preferred Skills

Experience with Cloud Security Assessments (AWS, Azure, GCP).

Knowledge of Container Security (Docker, Kubernetes).

Experience with DevSecOps practices and CI/CD security integration.

Familiarity with SIEM solutions such as Splunk, QRadar, or Microsoft Sentinel.

Exposure to vulnerability management platforms and security automation tools.

Understanding of compliance frameworks such as ISO 27001, PCI DSS, SOC 2, HIPAA, or

GDPR.

Preferred Certifications

Candidates with one or more of the following certifications will be preferred:

CEH (Certified Ethical Hacker)

OSCP (Offensive Security Certified Professional)

eJPT (eLearn Security Junior Penetration Tester)

PNPT (Practical Network Penetration Tester)

CompTIA Security+

CISSP (Preferred for senior candidates)

Educational Qualification

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.

What We Offer

Chance to work on enterprise cybersecurity projects for global clients.

Exposure to AI, Cloud, and Digital Transformation initiatives.

Collaborative and innovation-driven work environment.

Continuous learning, certification support, and career growth opportunities.

Competitive compensation and performance-based rewards.

📌 VAPT Security Testing Engineer (Pune)
🏢 Asmadiya Technologies
📍 Pune