TESTING AREAS & SPECIALIZATIONS

Vulnerability Assessment

Network, endpoint, server, cloud, application, and configuration vulnerability assessments Authenticated and unauthenticated scanning Vulnerability validation, risk prioritization, reporting, and remediation guidance Vulnerability management program assessments and recurring scanning services

Patch Management

Patch management readiness and current-state assessments Patch tool onboarding, configuration, deployment planning, and operational support Operating system and third-party application patching Patch testing, pilot groups, deployment rings, maintenance windows, and rollback planning Patch compliance reporting, exception management, remediation tracking, and service transition

Application Security Testing

Web Application Penetration Testing

API Penetration Testing

Mobile Application Security Testing

Network Security Testing

External Network Penetration Testing

Internal Network Penetration Testing

Wireless Security Assessments

Identity & Access Security Testing

Active Directory Security Assessments

Microsoft Entra ID Security Assessments

Hybrid Identity Security Assessments

Okta Security Assessments

CyberArk Security Assessments

Cloud Security Testing

Microsoft Azure Security Assessments

AWS Security Assessments

Cloud Configuration Reviews

Cloud Exposure Assessments

Social Engineering Assessments

Phishing Campaign Assessments

Spear Phishing Assessments

Vishing (Voice Phishing) Assessments

Smishing (SMS Phishing) Assessments

User Awareness & Susceptibility Testing

Advanced Security Testing

Assumed Breach Assessments

Privilege Escalation Testing

Lateral Movement Testing

Attack Path Analysis

Security ControlValidation

OPERATIONAL RESPONSIBILITIES





Participate in customer discovery calls to understand vulnerability assessment, penetration testing, patch management, business, compliance, and technical requirements.

Conduct scope definition activities for vulnerability assessments; web applications; APIs; internal and external networks; cloud environments; Active Directory; Microsoft Entra ID; wireless; social engineering; endpoints; servers; operating systems; third-party applications; and patch management platforms.

Review customer requirements and translate them into explicit VA, PT, and patch management engagement scopes, service models, and deliverables.

Define assumptions, constraints, exclusions, dependencies, and Rules of Engagement.

Develop Statements of Work (SOWs), scope documents, level-of-effort estimates, and service descriptions.

Calculate effort based on applications, IP ranges, APIs, cloud resources, identities, asset counts, operating systems, third-party applications, patch cadence, deployment rings, maintenance windows, integrations, reporting needs, and overall complexity.

Support proposal creation, RFP/RFI responses, and technical solution documentation.

Work with delivery teams to validate effort estimates, schedules, staffing requirements, and testing approaches.

Present proposed solutions during customer meetings and technical discussions.





Provide guidance on assessment and testing methodologies, patch deployment approaches, deliverables, risk considerations, remediation priorities, and industry best practices.

Support customer workshops, security assessments, and advisory engagements during the sales cycle.

Assist with service catalog development, testing packages, and standard pricing models.

Maintain knowledge of emerging threats, vulnerability management, penetration testing, patch management technologies, vendor capabilities, and market trends.

Participate in transition meetings to hand off VA, PT, and patch management opportunities to delivery teams after project award, including scope, assumptions, dependencies, service cadence, tooling, reporting, and customer commitments.

Experience:

6–10 years in Vulnerability Assessment, Penetration Testing, Patch Management, Security Consulting, or Cybersecurity Pre-Sales.

Experience scoping and estimating vulnerability assessment, penetration testing, and patch management engagements, including standalone and combined services.

Experience supporting US-based customers and working USA hours.

Strong customer-facing experience.

Tools & Technologies:

Primary Vulnerability Management Tools: Tenable, Rapid7 / InsightVM, Qualys

Patch / Remediation Tools: Tanium, Automox, Microsoft Intune, Microsoft Configuration Manager, Windows Server Update Services (WSUS)

Risk & GRC: TruOps, Cyberfusion

IAM / PAM: Okta, CyberArk

Endpoint Security: CrowdStrike, SentinelOne

Penetration Tools: Burp Suite Professional, OWASP ZAP, Nmap, Metasploit, BloodHound, sqlmap, Nessus

Scripting and Automation: Python, Powershell, Bash

Reporting: Power BI, Excel, PowerPoint, Visio

📌 VAPT and Patch Management Pre-Sales Consultant (Hyderabad)
🏢 SHI Solutions India
📍 Hyderabad