Job Type: Full-time

Designation: Security Engineer – VAPT / Penetration TestingPreferred Experience: 2+ YearsJob Summary:We are looking for a hands-on Security Engineer – VAPT / Penetration Testing to join our team full-time. You will be responsible for identifying, validating, and helping remediate security vulnerabilities across our external infrastructure, web applications, APIs, and cloud environment. This is a practical security role. We are looking for someone who enjoys breaking things, understanding how vulnerabilities can be chained together, and working closely with developers to get them fixed.Key Responsibilities:Perform regularexternal penetration testing of public-facing infrastructure.Conductweb application and API security testing.Identify vulnerabilities involving:Authentication and session managementAuthorization and access control / IDORInjection vulnerabilitiesXSSSSRFFile upload vulnerabilitiesBusiness-logic flawsAPI security issuesRate-limit and abuse scenariosPerform network and infrastructure reconnaissance and vulnerability validation.Review exposed services, ports, subdomains, DNS, SSL/TLS and other external attack surfaces.Perform basicAWS/cloud security assessments.Use automated scanners where appropriate, but manually validate findings.Develop proof-of-concepts to demonstrate security impact.Prepare explicit technical vulnerability reports with severity, evidence,



impact and remediation recommendations.Work directly with developers to explain vulnerabilities and recommended fixes.Retest vulnerabilities after remediation.Maintain an inventory of the organization's external attack surface.Help establish repeatable security testing processes and tooling.Monitor emerging vulnerabilities and assess whether they affect our infrastructure or applications.Required Skills1–3 years of practical experience in penetration testing, VAPT, application security or offensive security.Strong understanding ofOWASP Top 10.Hands-on experience withBurp Suite.Good understanding of HTTP/HTTPS, REST APIs and web application architecture.Good Linux and networking fundamentals.Experience with tools such as:Burp SuiteNmapKali Linuxffuf / GobusterSQLMapWiresharkMetasploitAbility to manually validate vulnerabilities rather than relying solely on automated scanners.Ability to write clear and technically accurate security reports.Good communication skills and ability to work with software developersNice to Have :OSCP, eJPT, PNPT, CEH or equivalent practical experience.Experience testing AWS environments.Experience with GraphQL APIs.Mobile application security testing.Source-code review.Experience with CI/CD security tooling.Bug bounty experience.CTF / Hack The Box / TryHackMe experience.Experience with Python, Bash or another scripting language.Company Overview:Aventior is a leading provider of innovative,



end-to-end technology solutions, empowering businesses across diverse industries to solve complex challenges and accelerate growth. We harness the power of cutting-edge technologies such as artificial intelligence (AI), machine learning (ML), MLOps, and DevOps to build scalable, future-ready solutions that drive measurable business outcomes.Our expertise extends across the entire data lifecycle. We offer comprehensive data development and management services, including cloud data architecture, universal data models, Data Transformation & ETL, data lakes, user management, Analytics & visualization, and automated data capture for unstructured and semi-structured sources such as scanned documents. These capabilities enable organizations to unlock the full value of their data and make faster, more informed decisions.At Aventior, our strength lies in combining deep industry expertise with advanced technical capabilities. Our teams work closely with clients to design and deliver tailored solutions that align with their unique business needs—whether it's optimizing operations, enhancing customer experiences, or driving strategic decision-making.We bring a holistic, cross-industry perspective to every engagement, supported by a strong foundation in design, implementation, innovation, migration, and ongoing support. With a global delivery model, a multi-country presence, and a team of highly skilled professionals, Aventior is well-positioned to deliver consistent, high-quality outcomes at scale.

📌 Security Engineer – VAPT / Penetration Testing (Nashik)
🏢 Aventior
📍 Nashik