VAPT Tester (1–3 Years Experience)

Job Location: Noida (On-site)
Experience: 1–3 Years
Employment Type: Full-Time
Job Summary
We are looking for a skilled and motivated VAPT (Vulnerability Assessment and Penetration Testing) Tester with 1–3 years of hands-on experience in application and infrastructure security testing. The ideal candidate should have a solid understanding of penetration testing methodologies, OWASP Top 10, and common security vulnerabilities. You will be responsible for identifying, validating, and reporting security weaknesses across web applications, mobile applications, APIs, networks, and cloud environments.
Key Responsibilities
Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, mobile applications, internal/external networks, and cloud environments.
Conduct manual and automated security testing to identify vulnerabilities.
Validate security findings and eliminate false positives.
Prepare comprehensive VAPT reports with technical findings, business impact, risk ratings, proof of concept, and remediation recommendations.
Perform vulnerability verification after remediation.
Execute network and infrastructure security assessments.
Identify OWASP Top 10, API Security Top 10, and business logic vulnerabilities.
Assist development and IT teams in understanding and fixing security issues.
Stay updated with emerging threats, vulnerabilities, and attack techniques.
Participate in security assessments, audits, and client discussions when required.
Required Skills
Good understanding of Web Application Security.
Knowledge of OWASP Top 10 and OWASP API Security Top 10.
Experience in manual penetration testing.
Understanding of network security concepts.
Basic knowledge of Linux and Windows environments.
Familiarity with authentication, authorization, session management, and cryptography.
Knowledge of HTTP/HTTPS protocols and REST APIs.
Strong analytical and problem-solving skills.
Good technical report writing and communication skills.
Required Tools
Burp Suite
Nmap
Nessus
OWASP ZAP
Nikto
Metasploit Framework
Postman
SQLMap
Wireshark
MobSF (Preferred)
Preferred Qualifications
CEH, eJPT, PNPT, Security+, or similar cybersecurity certification.
Knowledge of Mobile Application Security Testing (Android/iOS).
Basic understanding of Cloud Security (AWS, Azure, or GCP).
Familiarity with scripting languages such as Python, Bash, or PowerShell is an advantage.
Educational Qualification
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Experience
1–3 years of hands-on experience in:
Web Application VAPT
API Security Testing
Network Penetration Testing
Infrastructure Security Assessment
Security Report Preparation and Remediation Validation

Work arrangement
No