We are looking for a proactive Cyber Security Executive with hands-on experience or strong exposure to penetration testing (VAPT). The ideal candidate will be responsible for identifying vulnerabilities, performing security assessments, and supporting secure development practices across applications and infrastructure.
Key Responsibilities
- Perform Vulnerability Assessment & Penetration Testing (VAPT) on:
- Web applications
- APIs
- Networks and systems
- Identify and exploit security vulnerabilities such as:
- SQL Injection, XSS, CSRF, IDOR, authentication flaws
- Conduct manual and automated security testing
- Prepare detailed VAPT reports with risk classification and remediation steps
- Work closely with developers to validate fixes and ensure closure of vulnerabilities
- Assist in secure code review and basic security architecture validation
- Monitor systems for security threats and support incident response activities
- Stay updated with the latest cybersecurity threats, tools, and attack vectors
- Support internal audits and compliance activities (ISO 27001, SOC 2, etc.)
Required SkillsTechnical Skills
- Good understanding of:
- Web & application security concepts
- Networking fundamentals (TCP/IP, DNS, HTTP/HTTPS)
- OS fundamentals (Linux & Windows)
- Hands-on experience with tools such as:
- Burp Suite
- Nmap
- OWASP ZAP
- Metasploit (basic to intermediate)
- Nessus / OpenVAS
- Familiarity with:
- OWASP Top 10 vulnerabilities
- Basic scripting (Python / Bash / PowerShell)
- API testing tools (Postman, etc.)
- Preferred Qualifications
- Bachelor’s degree in Computer Science, IT, or related field
- Certifications (any of the following preferred):
- CEH (Certified Ethical Hacker)
- eJPT / eCPPT
- CompTIA Security+
- Exposure to:
- Cloud security (AWS / Azure basics)
- DevSecOps practices
- Bug bounty platforms (practical hacking exposure is a plus)