Role Overview

We are looking for a cybersecurity professional with 1-5 years of hands-on experience in VAPT and Penetration Testing across Web Applications, APIs, Mobile, Thick Client, and Infrastructure environments.

Key Responsibilities

- Perform Vulnerability Assessment & Penetration Testing (VAPT) across web, API, mobile, thick-client, network and infrastructure environments.
- Identify and validate vulnerabilities including SQL Injection, XSS, CSRF, IDOR, authentication/authorization flaws and business logic vulnerabilities.
- Conduct internal/external infrastructure testing covering servers, network devices, firewalls and VPNs.
- Perform vulnerability scanning, manual exploitation, risk assessment and remediation revalidation.
- Prepare VAPT reports with PoC, CVSS severity, business impact and remediation recommendations.
- Apply OWASP Top 10, OWASP API Top 10, CVE/CWE, NIST and ISO 27001 concepts.




- Work with Linux/Unix environments and demonstrate solid understanding of networking fundamentals and protocols.

Mandatory Technical Skills

- VAPT / Penetration Testing
- Web & API Security Testing
- Infrastructure / Network VAPT
- Linux / Unix
- Networking & Protocols: TCP/IP, DNS, HTTP/HTTPS, FTP, SSH, SMTP, VPN
- OWASP Top 10 / API Top 10
- Vulnerability assessment, exploitation & revalidation

VAPT Tools Hands-on experience with Burp Suite, OWASP ZAP, Nmap, Nessus, Metasploit, Wireshark, Acunetix/Netsparker and Postman.

Preferred Certifications

- CEH Certified Ethical Hacker
- CCNA
- ISO 27001
- ISO 20000 / ISO 31000 / ISO 22301
- Other relevant offensive security certifications are an advantage.

Education B.E./B.Tech, M.Tech in CSE/IT/ECE/E&TC;, or MCA.

📌 Analyst (Delhi)
🏢 Deloitte Shared Services India
📍 Delhi