Key Responsibilities
Conduct end-to-end Vulnerability Assessments and Penetration Testing (VAPT) across web applications, mobile applications, APIs, networks, and cloud environments.
Perform manual and automated penetration testing using industry-standard methodologies (OWASP Top 10, OWASP ASVS, OWASP MASVS, NIST, PTES, OSSTMM).
Manage and operate vulnerability scanning platforms such as Qualys VMDR, Tenable Nessus, Rapid7 or similar tools for continuous vulnerability scanning and asset risk management.
Perform manual exploitation and validation of vulnerabilities identified through automated scans to eliminate false positives.
Conduct source code reviews (SAST) and agile application security testing (DAST) using tools like Burp Suite, OWASP ZAP, Checkmarx, Fortify, or SonarQube.
Perform network-level penetration testing including internal/external network pentesting, wireless security assessments, and Active Directory security reviews.
Identify, document, and communicate security vulnerabilities with transparent risk ratings (CVSS scoring), business impact analysis, and remediation recommendations.
Collaborate with development,



DevOps, and infrastructure teams to ensure timely remediation of identified vulnerabilities.
Track vulnerability remediation lifecycle end-to-end using vulnerability management platforms (Qualys VMDR, ServiceNow SecOps, etc.).
Prepare detailed technical reports and executive summaries for both technical and non-technical stakeholders.
Stay current with emerging threats, CVEs, zero-day vulnerabilities, and evolving attack techniques.
Support red team/purple team exercises and contribute to threat Modeling activities.
Assist in developing and refining internal VAPT methodologies, playbooks, and testing checklists.
Ensure compliance with security frameworks and regulatory requirements (ISO 27001, PCI-DSS as applicable).

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Vapt Engineer Mumbai
🏢 Perydot
📍 Mumbai