Job Summary

We are seeking a skilled VAPT Engineer responsible for performing comprehensive Vulnerability Assessment and Penetration Testing across web applications, mobile applications, APIs, network infrastructure, cloud settings, wireless networks, and thick client applications. The candidate should possess robust knowledge of cybersecurity principles, vulnerability identification, exploitation techniques, remediation validation, and report preparation while adhering to industry standards and best practices.

Key Responsibilities Web Application Security Testing
Perform Web Application VAPT using OWASP WSTG methodology.
Identify OWASP Top 10 vulnerabilities.
Manual vulnerability verification.
Authentication Authorization Testing.
Session Management Testing.
Business Logic Testing.
Input Validation Testing.
File Upload Security Testing.
API Security Testing.
Source Code Review (basic understanding).

Mobile Application Security
Android Security Assessment.
iOS Security Assessment.
OWASP Mobile Top 10 Testing.
Reverse Engineering Basics.




Certificate Pinning Validation.
Local Storage Assessment.
Secure Communication Testing.

API Security Assessment
REST API Security Testing.
SOAP API Testing.
GraphQL Security Assessment.
JWT Token Testing.
OAuth Authentication Testing.
Rate Limiting Validation.
Authorization Testing.
Business Logic Testing.

Network VAPT
External Network Assessment.
Internal Network Assessment.
Firewall Security Review.
Switch Security Assessment.
Router Security Assessment.
VPN Security Testing.
Wireless Security Assessment.
Active Directory Assessment.
Windows Security Assessment.
Linux Security Assessment.

Infrastructure Security
Server Hardening Validation.
Patch Verification.
Configuration Review.
SSL/TLS Assessment.
DNS Security.
SMTP Security.
Email Security Review.
Database Security Assessment.

Cloud Security Assessment
AWS Security Review.
Azur

📌 Vapt Engineer Bengaluru
🏢 iValue InfoSolutions
📍 Bengaluru