02 Sep
|
Aventior
|
India
Designation: Security Engineer – VAPT / Penetration Testing
Preferred Experience: 2+ Years
Job Summary:
We are looking for a hands-on Security Engineer – VAPT / Penetration Testing to join our team full-time. You will be responsible for identifying, validating, and helping remediate security vulnerabilities across our external infrastructure, web applications, APIs, and cloud environment. This is a practical security role. We are looking for someone who enjoys breaking things, understanding how vulnerabilities can be chained together, and working closely with developers to get them fixed.
Key Responsibilities:
Perform regularexternal penetration testing of public-facing infrastructure.
Conductweb application and API security testing.
Identify vulnerabilities involving:
Authentication and session management
Authorization and access control / IDOR
Injection vulnerabilities
XSS
SSRF
File upload vulnerabilities
Business-logic flaws
API security issues
Rate-limit and abuse scenarios
Perform network and infrastructure reconnaissance and vulnerability validation.
Review exposed services, ports, subdomains, DNS, SSL/TLS and other external attack surfaces.
Perform basicAWS/cloud security assessments.
Use automated scanners where appropriate, but manually validate findings.
Develop proof-of-concepts to demonstrate security impact.
Prepare transparent technical vulnerability reports with severity, evidence, impact and remediation recommendations.
Work directly with developers to explain vulnerabilities and recommended fixes.
Retest vulnerabilities after remediation.
Maintain an inventory of the organization's external attack surface.
Help establish repeatable security testing processes and tooling.
Monitor emerging vulnerabilities and assess whether they affect our infrastructure or applications.
Required Skills
1–3 years of practical experience in penetration testing, VAPT, application security or offensive security.
Strong understanding ofOWASP Top 10.
Hands-on experience withB
📌 Security Engineer – VAPT (India)
🏢 Aventior
📍 India