Job Description: VAPT Analyst
Job Title
VAPT Analyst (Vulnerability Assessment & Penetration Testing)
Employment Type
Intern / Trainee / FullTime
Department
Cyber Security and VAPT

Role Overview
The VAPT Analyst is responsible for conducting hands-on vulnerability assessment and penetration testing across applications, infrastructure, identity systems, cloud environments, and networks.
This is a technical execution-focused role requiring real exploitation capability, attack simulation, and validation of security controls rather than reliance on automated scanning alone.
The role also supports red teaming and purple teaming initiatives, helping improve both offensive depth and defensive detection capabilities. Findings produced by this role directly influence risk posture, remediation priorities, and audit readiness.

Key Responsibilities
1. Web Application Security Testing
- Conduct black-box, gray-box, and authenticated penetration testing on web applications, portals, dashboards, and administrative interfaces.
- Identify and exploit vulnerabilities including:




- Broken authentication and authorization (IDOR, privilege escalation, access control bypass)
- Injection vulnerabilities (SQLi, command injection, SSTI, XXE)
- Session management flaws (JWT issues, CSRF, token misuse, session fixation)
- Test complex business logic flows such as workflows, approvals, role-based actions, and transaction handling.
- Manually validate findings to eliminate false positives and assess real-world exploitability.

2. Application & API Security Testing
- Perform security testing of backend applications and APIs (REST, GraphQL, internal services).
- Assess API authentication, authorization, rate limiting, object-level access control, and data exposure risks.
- Test for insecure deserialization, mass assignment, improper input validation, and logic flaws.
- Evaluate application error handling, logging behavior, and trust boundaries.

3. Mobile Application Security (Android & iOS)
- C

📌 VAPT Analyst (Mumbai)
🏢 Cybersmithsecure
📍 Mumbai