Pay Range: ₹50,000.00 – ₹60,000.00 per month Work

Location:
In person (Surat, Gujarat) Shift: US Business Hours Language Required: Fluent English (Verbal & Written) Position Overview The VAPT Engineer will be responsible for identifying, assessing, and exploiting vulnerabilities across client applications, networks, cloud environments, and systems. You will conduct end-to-end Vulnerability Assessments and Penetration Testing (VAPT), simulate real-world cyberattacks, write comprehensive technical reports, and collaborate with IT/Infrastructure teams to remediate security risks before they can be exploited.

Key Responsibilities

- Vulnerability Assessment & Penetration Testing: Perform regular automated and manual VAPT on Web Applications, Mobile Applications (Android/iOS), Internal/External Networks, APIs, and Cloud Infrastructure (AWS/Azure).
- Exploitation & Risk Evaluation: Conduct controlled ethical hacking simulations to validate vulnerabilities, establish threat severity, and demonstrate real-world impact without disrupting business operations.
- Security Reporting & Remediation Support: Prepare detailed, clear technical and executive VAPT reports with step-by-step POCs (Proof of Concept) and actionable remediation guidelines for technical teams.
- Security Compliance & Frameworks: Align security testing methodologies with industry standards such as OWASP Top 10, NIST, SANS, ISO 27001, and PTES.
- Tool & Infrastructure Management: Configure, maintain,



and utilize security tools (Burp Suite, Metasploit, Nmap, Nessus, Wireshark, OWASP ZAP, etc.).
- Re-testing & Verification: Perform re-validation testing after fix deployments to ensure all reported vulnerabilities are successfully patched.
- Code Review & Cloud Security: Conduct secure code reviews (SAST/DAST) and cloud configuration audits where applicable. Required Qualifications & Experience
-

Experience:
Minimum 3+ years of dedicated hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) or Ethical Hacking.
- Technical Expertise:
- Deep understanding of OWASP Top 10 (Web & API) and Mobile Application Security Standards (OWASP MASVS).
- Solid knowledge of Network Penetration Testing (Firewalls, Routers, VPNs, Wireless Networks).
- Solid understanding of TCP/IP protocols, OS internals (Linux/Windows), and Web Application Architecture.
- Experience with scripting languages (Python, Bash, or PowerShell) for automation and custom exploit development.
- Tools Knowledge: Hands-on experience with Burp Suite Pro, Nessus, Nmap, Metasploit, Acunetix, SQLmap, Wireshark, and Kali Linux suite.
- Communication

Skills:
Excellent written and spoken English skills to draft high-quality security audit reports and communicate complex risk findings to non-technical stakeholders. Pay: ₹50,000.00
- ₹60,000.00 per month

Benefits:
- Cell phone reimbursement Work

Location:
In person

📌 VAPT Engineer (Surat)
🏢 SkillPlus Academy
📍 Surat