Key Responsibilities:
Perform VAPT engagements for web applications, APIs, mobile applications, internal and external networks, and cloud environments.
Identify, validate, and assess vulnerabilities, misconfigurations, and business logic flaws.
Prepare detailed assessment reports with technical findings, proof-of-concept evidence, risk ratings, business impact, and remediation recommendations.
Communicate vulnerabilities and associated risks to technical and non-technical stakeholders.
To perform remediation validation and re-testing to confirm the closure of identified issues.
Stay updated with emerging threats, vulnerabilities, attack techniques, and current security trends.
Technical Skills :
Strong understanding of networking concepts including TCP/IP, DNS, HTTP/HTTPS, routing, switching, VPNs, and firewalls
Good knowledge of Operating Systems: o Linux (File system, Permissions, Basic commands) o Windows (Architecture, services, Registry basics)
Strong understanding of web, mobile (Android/IOS) and API application architecture and security concepts.
Knowledge of authentication and authorization mechanisms including sessions, cookies, JWT, OAuth, and SSO.
Understanding of common attack vectors such as XSS, SQL injection, SSRF, CSRF, and IDOR.
Understanding of REST, SOAP, GraphQL, and modern API architectures.
Hands-on experience identifying vulnerabilities aligned with the OWASP Top 10 & SANS 25.
Hands-on experience with tools: Burp Suite, Nessus, Metasploit, SQLmap, Postman, MobSF
Strong knowledge in leveraging AI to automate VAPT processes and support security research and exploration.
Strong troubleshooting skills with the ability to identify and resolve issues by understanding the client's environment.
Professional Skills
Strong analytical and problem-solving abilities.
Ability to think like an attacker while maintaining a risk-based approach.
Strong technical documentation and report-writing skills.
Strong verbal and written communication skills.
Ability to work independently as well as collaboratively within a team environment.
Strong attention to detail and commitment to delivering high-quality assessments.
Ability to manage multiple engagements and meet project deadlines.
Eagerness to learn new technologies, attack techniques, and security methodologies.
Qualifications
Education o Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field.
Experience o 0-1 year of hands-on experience in VAPT, Application Security, Offensive Security, or related cybersecurity domains. Internship, freelance, bug bounty, research, or lab-based experience will be considered valuable.
Pay: ₹10,000.00 per month
Application Question(s):
- Are you currently pursuing or have you completed a Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field?
- Do you have any hands-on exposure to Cyber Security, VAPT, Application Security, or Penetration Testing through internships, projects, labs, or self-learning?
- Are you familiar with OWASP Top 10 vulnerabilities?
- Have you used Burp Suite for security testing or learning purposes?
- Have you performed Web Application Security Testing as part of a project, lab, internship, or self-learning exercise?
- Do you have basic knowledge of Linux commands and file permissions?
- Do you have a basic understanding of networking concepts such as TCP/IP, DNS, HTTP/HTTPS, and Firewalls?
- Have you used platforms such as TryHackMe, Hack The Box, PortSwigger Web Security Academy, or similar cybersecurity learning platforms?
- Are you based in Mumbai or willing to work from Mumbai?
- Briefly describe your best cybersecurity project and provide the project link.
Work Location: In person
