Manager/Senior Manager - Vulnerability Assessment & Penetration Testing
Job Title: VAPT Manager / Sr. Manager
Location: Mumbai / Gurgaon.
Experience: Minimum 6 years.
Job Type: Full-time.
Department: Cybersecurity / Information Security.
About the Role:
Key Responsibilities:
- Manage a team of VAPT professionals, mentoring junior members and reviewing technical deliverables.
- Define and implement VAPT strategy, methodology, tools, and best practices aligned with business goals.
- Identify security vulnerabilities, misconfigurations, and risks through manual and automated testing.
- Perform threat modeling and risk assessments to prioritize testing efforts.
- Develop and present technical reports to stakeholders, including risk severity and recommended mitigations.
- Coordinate with application owners, DevOps, IT, and other teams to ensure remediation of identified vulnerabilities.
- Stay updated with the latest vulnerabilities, exploits, and threat intelligence.
- Manage third-party VAPT vendors and ensure quality and compliance of their deliverables.
- Ensure compliance with relevant security standards (OWASP, NIST, ISO 27001, PCI-DSS, etc.
Required Skills and Qualifications:
- Minimum of 6 years of experience in cybersecurity, with at least 4 years focused on VAPT.
- Strong knowledge of tools such as Burp Suite, Nessus, Nmap, Metasploit, Qualys, Nikto, Wireshark, etc.
- Expertise in identifying and exploiting vulnerabilities in web applications, APIs, mobile apps, networks, and cloud infrastructure.
- Hands-on experience in secure code review and reverse engineering is a plus.
- Strong understanding of OWASP Top 10, SANS Top 25, MITRE ATT&CK framework.
- Industry certifications such as OSCP, OSWE, CEH, GWAPT, GPEN, or CISSP are preferred.
- Excellent communication, reporting, and stakeholder management skills.
Preferred Qualifications:
- Exposure to DevSecOps and integrating security into CI/CD pipelines.
- Familiarity with regulatory requirements and audits (e.g., GDPR, RBI, ISO, etc.
- Cloud security experience (AWS/GCP/Azure certifications are a plus).
Employment Type:
Work Mode:
Didn’t find the job appropriate? Report this Job
