: VAPT (Vulnerability Assessment & Penetration Testing) Engineer

Location: Noida

Experience: 4 Years

Employment Type: Full time

About the Role

We are looking for a skilled VAPT Engineer with a solid background in identifying, analyzing, and remediating security vulnerabilities across web applications, networks, APIs, and infrastructure. The ideal candidate will have hands-on experience in both manual and automated penetration testing techniques.

Key Responsibilities
Conduct Vulnerability Assessments and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and cloud infrastructure
Perform manual and automated security testing using industry-standard tools and methodologies (OWASP Top 10, SANS 25, PTES)
Identify, document, and report security vulnerabilities with transparent risk ratings and remediation recommendations
Collaborate with development and DevOps teams to validate fixes and re-test post-remediation
Perform network penetration testing, including internal and external network assessments
Conduct configuration reviews, source code reviews, and threat modeling as needed
Stay current with emerging threats, CVEs, exploits, and attack techniques
Prepare detailed VAPT reports for technical and non-technical stakeholders




Support compliance and audit requirements (ISO 27001, PCI-DSS, SOC 2, etc.)
Participate in red team/blue team exercises as required

Required Skills & Qualifications
Bachelor's degree in Computer Science, IT, or related field
4 years of hands-on experience in VAPT / Application Security / Network Security
Proficiency with tools such as Burp Suite, Nessus, Nmap, Metasploit, OWASP ZAP, Wireshark, Kali Linux
Strong understanding of OWASP Top 10, SANS 25, and common attack vectors (SQLi, XSS, CSRF, etc.)
Experience with network security assessments and firewall/IDS-IPS testing
Knowledge of scripting languages (Python, Bash) for tool customization is a plus
Familiarity with cloud security (AWS/Azure/GCP) is an added advantage
Relevant certifications preferred: CEH, OSCP, CompTIA Security , or equivalent
Strong analytical, problem-solving, and report-writing skills
Ability to work independently and manage multiple assessments simultaneously

Preferred Certifications
OSCP (Offensive Security Certified Professional)
CEH (Certified Ethical Hacker)
CREST / GPEN / GWAPT (any one preferred)

Pay: ₹30,000.00 - ₹40,000.00 per month

Work Location: In person

📌 Vapt Engineer Noida
🏢 Quantorus 365
📍 Noida