Required Skills Experience

- 3-5 years of hands-on experience in Vulnerability Assessment, Penetration Testing, and Application Security.
- Solid working knowledge of Qualys VMDR and Tenable Nessus for vulnerability scanning, asset management, and risk prioritization.
- Proven experience in Web Application Penetration Testing using Burp Suite (Professional), OWASP ZAP, and related tools.
- Solid understanding of OWASP Top 10, SANS Top 25, CWE, and secure coding principles.
- Experience with network penetration testing tools such as Nmap, Metasploit, Nikto, SQLmap, Wireshark.
- Familiarity with API security testing (REST/SOAP), Postman, and API-specific vulnerability classes.
- Working knowledge of cloud security assessments (AWS/Azure/GCP) and tools like ScoutSuite, Prowler, or Pacu.
- Understanding of mobile application security testing (Android/iOS) using MobSF, Frida,



or similar tools is a plus.
- Strong knowledge of CVSS scoring, risk assessment methodologies, and vulnerability triage.
- Scripting/automation skills in Python, Bash, or PowerShell for tool integration and custom exploit/PoC development.
- Experience with SIEM, ticketing systems, and vulnerability management workflows (ServiceNow, Jira, etc.).
- Excellent report writing and communication skills for both technical and executive audiences.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 VAPT Engineer (Mumbai)
🏢 Perydot
📍 Mumbai