Analyst - VAPT

GRAMAX; Delhi; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Gramax in Delhi is seeking a VAPT specialist to support vulnerability assessment and remediation efforts. You will assist in security testing, risk mitigation, and documentation, while collaborating with internal teams and clients to ensure robust protection.

A strong foundation in VAPT concepts and tools is required. You will gain exposure to both open-source and commercial security tools, work on network mappings, and contribute to remediation planning and reporting for ongoing security

Qualifications

• Familiar with vulnerability assessment, penetration testing, and remediation processes.
• Understanding of vulnerability management and risk mitigation.
• Awareness of network mapping, ports, services, and security devices.

Responsibilities

• Support vulnerability mitigation plan implementation under senior guidance.
• Assist in maintaining risk management frameworks, policies, and procedures.
• Coordinate with internal stakeholders and client interactions related to vulnerability mitigation.
• Assist with VAPT activities including testing and reporting.
• Conduct assessments of networks and devices using open-source and commercial tools.
• Compile findings and support documentation of new vulnerabilities.

Skills

VAPT concepts

Offensive security tools

Vulnerability assessment

Penetration testing

Remediation planning

Network mapping

Tools

Open-source tools

Commercial tools

Job description

• Support the implementation of vulnerability mitigation plans under the guidance of senior team members.
• Assist in maintaining risk management frameworks, policies, and procedures.
• Coordinate with internal stakeholders and support client interactions related to vulnerability mitigation.
• Assist with Web Application Security Testing, Vulnerability Assessment, and Penetration Testing activities.
• Conduct vulnerability assessments of network and security devices using open-source and commercial tools.
• Compile assessment findings and support the documentation of new vulnerabilities.
• Map networks and identify ports and services running on exposed network and security devices.
• Support operational activities, including security exception handling and ticket management, while staying updated on security trends and vulnerabilities.
• Develop working knowledge of manual penetration-testing techniques alongside automated tools and frameworks.
• Build and maintain awareness of computer network exploitation tools, techniques, countermeasures, and emerging vulnerability trends.
• Analyse scan reports and support the preparation of remediation and mitigation plans.
• Assist in preparing client reports, dashboards, and presentations.
• Track new vulnerabilities affecting network and security devices across different vendors.
• Coordinate with external third parties for VAPT tests as required.

2. Skills and Knowledge

Educational Qualifications

Technical Skills and Knowledge

• Working knowledge of VAPT concepts and tools.
• Familiarity with offensive security tools and techniques.
• Understanding of vulnerability assessment, penetration testing, and vulnerability mitigation processes.
• Ability to analyse scan findings and support accurate vulnerability reporting and remediation planning.
• Awareness of network mapping, ports and services, and security devices.

Certifications

• Relevant security certification, such as CEH or equivalent, is preferred.