Experience Level : 3 Years

Position Overview

We are seeking a skilled VAPT Engineer with 3 years of experience to join our dynamic cybersecurity team. The ideal candidate will have a solid background in vulnerability assessment and penetration testing, with a keen eye for identifying security risks and implementing effective solutions.

Hands-on experience in identifying and exploiting vulnerabilities in web applications, APIs, and mobile platforms. Thorough knowledge of cloud security (AWS, Azure, GCP) and proper understanding of secure development life cycle (SDLC) practices is a must.

Key Responsibilities:

Vulnerability Assessment

Perform regular vulnerability scans on applications, networks, and systems.

Identify, analyze, and classify security vulnerabilities.

Penetration Testing

Conduct penetration tests to simulate cyberattacks and assess system security.

Exploit vulnerabilities to validate their impact.

Reporting

Prepare detailed vulnerability assessment and penetration testing reports.

Provide actionable recommendations to mitigate risks.

Compliance and Standards

Ensure adherence to industry standards (OWASP, SANS, NIST, etc.).

Support compliance with frameworks like ISO 27001, PCI DSS, GDPR, etc.

Collaboration





Work closely with development, IT, and security teams to remediate vulnerabilities.

Provide guidance on secure coding practices and system hardening.

Continuous Improvement

Stay updated on OWASP Top 10 and CWE/SANS 25 vulnerability categories.

Stay updated on the latest security trends, tools, and techniques.

Recommend enhancements to existing security protocols.

Tool Expertise

Use tools such as Nessus, Burp Suite, Metasploit, Kali Linux, Qualys, and others for VAPT activities.

Qualifications

Bachelor s degree in Computer Science, Information Technology, or a related field (preferred but not compulsory)

3 years of experience in Vulnerability Assessment and Penetration Testing.

Strong understanding of network protocols, operating systems, cloud infrastructure and web applications.

Excellent problem-solving skills and attention to detail.

Relevant certifications such as CEH, OSCP, or CISSP, GIAC Certified Penetration Tester (GPEN) or Offensive Security Experienced Penetration Tester (OSEP) are a plus

Strong communication skills Written & Verbal in English language

Ability to work collaboratively in a team environment is a must

📌 VAPT Engineer (Kochi)
🏢 Sinnonteq IT Consulting
📍 Kochi