Role Level L2

Hiring Model Internal employee or outsourced assessment specialist

Position Summary Performs vulnerability assessment and supports penetration testing across servers, network devices, applications, APIs, databases, endpoints, and cloud assets used in financial-services operations.

Reporting To VAPT Lead / Security Testing Manager / Security Assurance Manager

Experience 3- 6 years

Education Bachelors degree in Cyber Security / IT / Computer Science / Engineering or equivalent

Preferred Certifications CEH, eJPT, Security+, Burp Suite / web app testing credentials preferred

Mandatory Setting Exposure Infrastructure scanning, web/API testing support, remediation tracking, retesting, report writing

Indicative Grade Assistant Manager / Deputy Manager equivalent (illustrative)

Detailed Responsibilities
- Execute vulnerability scans and authenticated assessments for in-scope infrastructure, network devices, databases, web applications, APIs, cloud assets, and user endpoints.




- Perform manual validation of findings to reduce false positives and provide accurate remediation guidance.
- Support controlled penetration testing activities for web/mobile/API and internal infrastructure assessments within approved rules of engagement.
- Document vulnerabilities with proof, business impact, asset mapping, severity, and actionable remediation recommendations.
- Track remediation with infrastructure, application, database, endpoint, and cloud teams until closure / risk acceptance.
- Support retests, closure validation, audit evidence preparation, and stale-finding escalation.
- Maintain test schedules, scope inventory, testing credentials coverage, and evidence for periodic / regulator-driven assessments.
- Promptly escalate critical exploitable findings affecting internet-facing, privileged, or business-critical assets.

Core Deliverables
- Vulnerability reports and remediation trackers.
- Retest / closure validation records.
- Assessment evidence for audit

📌 VPAT Analyst (Mumbai)
🏢 ANANDRATHI
📍 Mumbai