VAPT Specialist

Job SummaryWe are seeking an experienced VAPT Specialist with strong hands-on expertise in Network Penetration Testing as the primary area of responsibility, along with experience in Web and Mobile Application Penetration Testing, Vulnerability Assessment, and Red Teaming.The candidate will be responsible for identifying, validating, and exploiting security vulnerabilities across enterprise environments and providing actionable remediation recommendations based on industry-standard security frameworks and methodologies.Key ResponsibilitiesPerform Internal and External Network Penetration Testing as the primary responsibility.Conduct Web Application, API, and Mobile Application Penetration Testing.Perform Vulnerability Assessments using Tenable.sc / Nessus.Conduct Red Teaming and adversary simulation activities to assess the organization's ability to detect, respond to, and mitigate realistic attacks.Perform manual vulnerability validation and exploitation beyond automated scanning.Conduct reconnaissance, enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation activities.Assess network infrastructure, Active Directory, Windows/Linux systems, network services, and security controls.Identify vulnerabilities and assess their business and technical impact.Prepare detailed technical reports and executive-level summaries.Provide clear and actionable remediation recommendations.Perform vulnerability retesting and validate remediation.Develop and maintain VAPT methodologies, testing checklists, and technical procedures.Follow recognized security frameworks and methodologies, including NIST, OWASP, and industry-standard penetration testing practices.Research emerging vulnerabilities, exploits, attack techniques, and offensive security methodologies.Required Experience & Qualifications3+ years of hands-on experience in Vulnerability Assessment and Penetration Testing.Strong and proven experience in Network Penetration Testing.Practical experience in:Internal & External Network Penetration TestingActive Directory Security TestingWeb Application & API Penetration TestingMobile Application Penetration TestingVulnerability AssessmentRed Teaming / Adversary SimulationExperience with Tenable.sc / Nessus is preferred.Strong understanding of NIST, OWASP, and penetration testing methodologies.Strong knowledge of network protocols, Windows/Linux systems, Active Directory, authentication mechanisms, and common network security controls.Strong understanding of vulnerability exploitation and post-exploitation techniques.Strong technical report writing and documentation skills.EducationBachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is preferred.Equivalent professional experience and industry certifications may be considered.