Core Responsibilities
Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, mobile apps, networks, Active Directory, APIs, and enterprise systems.
Perform manual and automated penetration testing with solid hands-on depth in web, network, and AD security testing.
Execute Red Teaming / adversary simulation activities, including privilege escalation and lateral movement.
Perform cloud security assessments across AWS, Azure, and GCP environments.
Review and assess security configurations of network devices, servers, databases, and cloud services.
Evaluate CI/CD pipelines and DevSecOps practices to identify security gaps in build and deployment processes.
Analyze findings, assign risk ratings,
and prepare explicit VAPT reports with impact analysis and actionable remediation guidance.
Collaborate with development, DevOps, IT, and client stakeholders to prioritize and support vulnerability remediation.
Continuously track emerging threats and attack techniques and enhance testing methodologies accordingly.
Certifications (At Least One Mandatory)
CRTO – Certified Red Team Operator
OSCP – Offensive Security Certified Professional
CRTP – Certified Red Team Professional
GPEN – GIAC Penetration Tester
CEH – Certified Ethical Hacker
CompTIA PenTest+
CISSP / CISM (Positive to have for senior / leadership roles)