TESTING AREAS & SPECIALIZATIONS Vulnerability Assessment Network, endpoint, server, cloud, application, and configuration vulnerability assessments Authenticated and unauthenticated scanning Vulnerability validation, risk prioritization, reporting, and remediation guidance Vulnerability management program assessments and recurring scanning services Patch Management Patch management readiness and current-state assessments Patch tool onboarding, configuration, deployment planning, and operational support Operating system and third-party application patching Patch testing, pilot groups, deployment rings, maintenance windows, and rollback planning Patch compliance reporting, exception management, remediation tracking, and service transition Application Security Testing Web Application Penetration Testing API Penetration Testing Mobile Application Security Testing Network Security Testing External Network Penetration Testing Internal Network Penetration Testing Wireless Security Assessments Identity & Access Security Testing Active Directory Security Assessments Microsoft Entra ID Security Assessments Hybrid Identity Security Assessments Okta Security Assessments CyberArk Security Assessments Cloud Security Testing Microsoft Azure Security Assessments AWS Security Assessments Cloud Configuration Reviews Cloud Exposure Assessments Social Engineering Assessments Phishing Campaign Assessments Spear Phishing Assessments Vishing (Voice Phishing) Assessments Smishing (SMS Phishing)



Assessments User Awareness & Susceptibility Testing Advanced Security Testing Assumed Breach Assessments Privilege Escalation Testing Lateral Movement Testing Attack Path Analysis Security ControlValidation OPERATIONAL RESPONSIBILITIES Participate in customer discovery calls to understand vulnerability assessment, penetration testing, patch management, business, compliance, and technical requirements. Conduct scope definition activities for vulnerability assessments; web applications; APIs; internal and external networks; cloud environments; Active Directory; Microsoft Entra ID; wireless; social engineering; endpoints; servers; operating systems; third-party applications; and patch management platforms. Review customer requirements and translate them into clear VA, PT, and patch management engagement scopes, service models, and deliverables. Define assumptions, constraints, exclusions, dependencies, and Rules of Engagement. Develop Statements of Work (SOWs), scope documents, level-of-effort estimates, and service descriptions. Calculate effort based on applications, IP ranges, APIs, cloud resources, identities, asset counts, operating systems, third-party applications, patch cadence, deployment rings, maintenance windows, integrations, reporting needs, and overall complexity. Support proposal creation, RFP/RFI responses, and technical solution documentation. Work with delivery teams to validate effort estimates, schedules, staffing requirements, and testing approaches. Present proposed solutions during customer meetings and technical discussions.



Provide guidance on assessment and testing methodologies, patch deployment approaches, deliverables, risk considerations, remediation priorities, and industry best practices. Support customer workshops, security assessments, and advisory engagements during the sales cycle. Assist with service catalog development, testing packages, and standard pricing models. Maintain knowledge of emerging threats, vulnerability management, penetration testing, patch management technologies, vendor capabilities, and market trends. Participate in transition meetings to hand off VA, PT, and patch management opportunities to delivery teams after project award, including scope, assumptions, dependencies, service cadence, tooling, reporting, and customer commitments.

Experience:
6–10 years in Vulnerability Assessment, Penetration Testing, Patch Management, Security Consulting, or Cybersecurity Pre-Sales. Experience scoping and estimating vulnerability assessment, penetration testing, and patch management engagements, including standalone and combined services. Experience supporting US-based customers and working USA hours. Strong customer-facing experience. Tools & Technologies: Primary Vulnerability Management Tools: Tenable, Rapid7 / InsightVM, Qualys Patch / Remediation Tools: Tanium, Automox, Microsoft Intune, Microsoft Configuration Manager, Windows Server Update Services (WSUS) Risk & GRC: TruOps, Cyberfusion IAM / PAM: Okta, CyberArk Endpoint Security: CrowdStrike, SentinelOne Penetration Tools: Burp Suite Skilled, OWASP ZAP, Nmap, Metasploit, BloodHound, sqlmap, Nessus Scripting and Automation: Python, Powershell, Bash Reporting: Power BI, Excel, PowerPoint, Visio

📌 VAPT and Patch Management Pre-Sales Consultant (Hyderabad)
🏢 SHI Solutions India
📍 Hyderabad