Role & responsibilities

- Monitor & track security vulnerability in the public attack surface, Evaluate security posture in cloud WAF and other related cloud technologies.

- Track progress, prepare periodic reports and share upstream for review and approval.

- Assistance to Vendor Risk Assessment (VRA) cycle from scheduling to the closure of the report

- Conduct VAPT for Web Applications, Mobile Applications, APIs, Networks and Servers.

- Perform manual and automated penetration testing using Burp Suite, Nessus, Qualys, Nmap, Metasploit, OWASP ZAP and Kali Linux.

- Identify, validate and categorize security vulnerabilities based on CVSS/CVE and business impact.

- Perform security assessments covering OWASP Top 10, authentication, authorization, access control,



configuration and business-logic vulnerabilities.

- Prepare VAPT reports with findings, risk ratings, evidence/PoC and remediation recommendations.

- Assistance in selection of vendors for services viz., VRA, VAPT, Red team exercises, Configuration reviews, AST/Source Code Reviews, other security assessments/reviews

- Coordinate with Application, Infrastructure and Security teams for remediation, re-testing and closure.

- Support internal/external audits, regulatory assessments and compliance requirements.

Interested candidates can share their updated resume on: [email protected]

📌 VAPT Tester (Need Immediate Joiner) (Navi Mumbai)
🏢 Utkarsh Small Finance Bank
📍 Navi Mumbai