: VAPT (Vulnerability Assessment & Penetration Testing) Engineer

Location: Noida

Experience: 4 Years

Employment Type: Full-Time

About the Role

We are looking for a skilled VAPT Engineer with a solid background in identifying, analyzing, and remediating security vulnerabilities across web applications, networks, APIs, and infrastructure. The ideal candidate will have hands-on experience in both manual and automated penetration testing techniques.

Key Responsibilities

- Conduct Vulnerability Assessments and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and cloud infrastructure
- Perform manual and automated security testing using industry-standard tools and methodologies (OWASP Top 10, SANS 25, PTES)
- Identify, document, and report security vulnerabilities with clear risk ratings and remediation recommendations
- Collaborate with development and DevOps teams to validate fixes and re-test post-remediation
- Perform network penetration testing, including internal and external network assessments
- Conduct configuration reviews, source code reviews, and threat modeling as needed
- Stay current with emerging threats, CVEs, exploits, and attack techniques
- Prepare detailed VAPT reports for technical and non-technical stakeholders




- Support compliance and audit requirements (ISO 27001, PCI-DSS, SOC 2, etc.)
- Participate in red team/blue team exercises as required

Required Skills & Qualifications

- Bachelor's degree in Computer Science, IT, or related field
- 4 years of hands-on experience in VAPT / Application Security / Network Security
- Proficiency with tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, Wireshark, Kali Linux
- Strong understanding of OWASP Top 10, SANS 25, and common attack vectors (SQLi, XSS, CSRF, etc.)
- Experience with network security assessments and firewall/IDS-IPS testing
- Knowledge of scripting languages (Python, Bash) for tool customization is a plus
- Familiarity with cloud security (AWS/Azure/GCP) is an added advantage
- Relevant certifications preferred: CEH, OSCP, CompTIA Security , or equivalent
- Strong analytical, problem-solving, and report-writing skills
- Ability to work independently and manage multiple assessments simultaneously

Preferred Certifications

- OSCP (Offensive Security Certified Professional)
- CEH (Certified Ethical Hacker)
- CREST / GPEN / GWAPT (any one preferred)

Pay: ₹30,000.00 - ₹40,000.00 per month

Work Location: In person

📌 VAPT Engineer (Noida)
🏢 Quantorus 365
📍 Noida