We are seeking a skilled VAPT Engineer with 4+ years of experience in Vulnerability Assessment and Penetration Testing. The candidate will be responsible for identifying security vulnerabilities in web applications, APIs, networks, cloud environments, and infrastructure, and providing remediation recommendations to enhance the organization's security posture.

Key Responsibilities

- Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and infrastructure.
- Conduct manual and automated security testing to identify vulnerabilities and security weaknesses.
- Perform security assessments based on industry standards such as OWASP, NIST, and PTES.
- Execute network penetration testing, web application penetration testing, and API security assessments.
- Prepare detailed vulnerability assessment reports with risk ratings and remediation recommendations.
- Validate and verify vulnerability fixes through re-testing activities.
- Collaborate with development, infrastructure, and security teams to address identified security issues.
- Conduct source code reviews and secure code assessments (preferred).




- Support compliance requirements related to information security and cybersecurity.
- Stay updated with the latest cybersecurity threats, attack techniques, and security tools.

Required Skills

- 4+ years of hands-on experience in VAPT and cybersecurity testing.
- Solid understanding of OWASP Top 10, SANS Top 25, and common attack vectors.
- Experience with tools such as Burp Suite, Nessus, Nmap, Metasploit, Wireshark, Acunetix, and Qualys.
- Knowledge of web application security testing, API security testing, and network security assessment.
- Familiarity with Linux, Windows, and cloud security concepts.
- Understanding of authentication mechanisms, encryption, and secure coding practices.
- Experience in preparing technical and executive-level security reports.

Preferred Qualifications

- Certifications such as CEH, OSCP, eJPT, eCPPT, CREST, or equivalent.
- Experience with cloud security testing (AWS, Azure, GCP).
- Knowledge of DevSecOps and Secure SDLC practices.

Education

- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

Notice Period

- Immediate

📌 VAPT Analyst_ Chennai
🏢 Clover Infotech
📍 Chennai