Ethical Hacker / VAPT Specialist (Vulnerability Assessment and Penetration Testing Specialist)

Ethical Hacker / VAPT Specialist
Job Title: Ethical Hacker / VAPT Specialist
Experience: 4–5 Years
Salary: Up to ₹18 LPA
Employment Type: Full-Time
Department: Information Security / Cybersecurity
Job Summary
We are looking for an experienced Ethical Hacker / VAPT Specialist to identify security vulnerabilities, conduct penetration testing, and strengthen the security of applications, networks, and IT infrastructure. The ideal candidate should have hands-on experience with vulnerability assessment, penetration testing methodologies, security tools, and preparing detailed technical reports with remediation recommendations.
Key Responsibilities
* Conduct Vulnerability Assessment and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and infrastructure.
* Identify, analyze, validate, and prioritize security vulnerabilities based on risk and severity.
* Perform manual and automated penetration testing to identify exploitable security weaknesses.
* Use security testing tools such as Burp Suite, OWASP ZAP, Nmap, Nessus, Metasploit, and Wireshark.
* Conduct security assessments aligned with OWASP Top 10 and industry-standard penetration testing methodologies.
* Prepare detailed VAPT reports outlining findings, risk ratings, proof of concept, and remediation recommendations.
* Collaborate with development, IT, and security teams to resolve identified vulnerabilities.
* Perform retesting and validation after remediation to ensure vulnerabilities have been addressed.
* Conduct network, operating system, and application security assessments.
* Stay updated on emerging cyber threats, attack techniques, vulnerabilities, and security best practices.
Required Skills & Qualifications
* Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
* 4–5 years of hands-on experience in ethical hacking, penetration testing, and vulnerability assessment.
* Strong knowledge of web application, API, network, and infrastructure penetration testing.
* Experience with tools such as Burp Suite Professional, Nmap, Nessus, Metasploit, and OWASP ZAP.
* Understanding of OWASP Top 10, common attack vectors, authentication and authorization flaws, SQL injection, XSS, SSRF, and other web security vulnerabilities.
* Knowledge of networking protocols, Linux/Windows environments, and basic scripting using Python, Bash, or PowerShell.
* Strong analytical, problem-solving, documentation, and communication skills.
Preferred Certifications
* CEH (Certified Ethical Hacker)
* OSCP (Offensive Security Certified Professional)
* CompTIA PenTest+
* GPEN or equivalent penetration testing certification
Compensation
Annual CTC: 18 LPA
Compensation will be based on relevant experience, technical expertise, and interview performance.
Application Process
Interested candidates can share their updated resume highlighting relevant experience in Ethical Hacking, VAPT, penetration testing tools, certifications, and security assessment projects.

Work arrangement
No