Position: VAPT Engineer
Location: Mumbai
Duration: Contract to Hire

Job Description:

Experience: Min 4 - 8 years hands-on experience

Tech-Stack & Skills:
• Tenable Nessus / Tenable.io / Tenable.SC – advanced scan orchestration, repository management, credential troubleshooting & emergency rescan authorization
• Qualys VMDR / Rapid7 InsightVM – enterprise VM program governance, risk-scoring calibration & policy management
• CVE / CVSS v3.1 / EPSS / CISA KEV – advanced risk scoring, exploitability validation & prioritization weighting
• Nmap / Masscan / Shodan – deep network reconnaissance, exposed-service analysis & attack-surface enumeration
• Python / PowerShell / Bash – scan automation, custom report generation & remediation workflow orchestration




• SIEM (Splunk / IBM QRadar / Elastic Security) – advanced correlation, threat-informed vulnerability management & SOC analytics
• GRC Platforms (Archer / ServiceNow GRC) – exception governance, compensating control design & compliance reporting
• CMDB & Asset Inventory Tools – scope-alignment governance, inventory reconciliation & coverage optimization
• CIS Benchmarks / DISA STIGs – multi-vector OS/DB/NW exploitability analysis & hardening validation
• Power BI / Tableau – executive dashboards, risk quantification, closure-velocity tracking & trend analysis

Continuous learning on the Job.

📌 VAPT @ Mumbai
🏢 Quess IT Solutions
📍 Mumbai