Lead Cyber Security- VAPT

Rebit; Navi Mumbai; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

ReBIT in Navi Mumbai seeks a senior information security professional to lead penetration testing, red team activities, and vulnerability assessments across RBI-aligned projects. The role requires hands-on testing on platforms like .NET and Java, plus mobile testing for Android and iOS.

The candidate will develop security testing frameworks, evaluate controls, and coordinate with external testers. Strong project management and RBI security knowledge are essential.

Qualifications

• Bachelor's degree in computer science or IT.
• Extensive information security background with 5+ years of experience.
• 3+ years in penetration testing, red teaming or vulnerability assessment.
• Experience evaluating security controls via Ethical Hacking, Penetration Testing, Red Team assessments.
• Ability to assess security technologies to detect vulnerabilities.
• Hands-on black-box and grey-box testing on platforms like .NET, Java.
• Mobile testing experience on Android and iOS.
• Understanding of security architecture and infrastructure.
• Familiarity with OWASP, SANS, ISACA, GAO, FISCAM, NSA, NIST, IETF best practices.
• Develop framework to test compliance of applications/systems.
• Experience in project management.

Responsibilities

• Conduct internal/third-party Ethical Hacking / Vulnerability Assessment / Penetration Testing, Red Team assessments on business-critical assets.
• Coordinate with external hacking/penetration testing for RBI projects.
• Liaise with security intelligence to obtain latest threats and vulnerabilities.
• Prepare security effectiveness reports for management.
• Test applications/systems for RBI/REBIT information security compliance.
• Induct new applications into Data Centre after pentesting/assessment.
• Prioritize vulnerabilities and update Security Operations team for mitigation.
• Follow up on closure of gaps and elevate when necessary.
• Decide relevant metrics for measuring security effectiveness and quantify them.

Skills

Information Security

Penetration Testing

Red Team

Vulnerability Assessment

Ethical Hacking

Threat Evaluation

Black-box Testing

Grey-box Testing

Platform Testing

Mobile Testing

Security Architecture

Security Frameworks

OWASP/NIST

Compliance Testing RBI

Project Management

Education

Bachelors in Computer Science/IT

CISSP

CEH

Job description

Experience/ Qualifications

• University degree in the field of computer science or IT.
• 5+ years of Information Security background is essential.
• 3+ years of Penetration testing, Red teaming and or vulnerability assessment experience
• Experience in evaluating the control environment through EthicalHacking, Penetration Testing, Red Team assessments.
• Evaluation of security technologies to detect vulnerabilities
• Hands on experience in black-box, grey-box penetration testing on platformslike .Net, Java etc.
• Hands on experience on mobile testing of android and IOS
• A high-level appreciation of Security Architecture and Infrastructure
• Should be familiar with the best practices of OWASP, SANS Institute,ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)
• Develop a framework to test compliance of applications / systems.
• Experience in project management
• Information technology

Responsibilities

• Conduct internal / third-party Ethical Hacking / VulnerabilityAssessment/ Penetration Testing, Red Team assessment on business-critical assets and processes.
• Liaison with external ethical hacking / penetration testing for RBIprojects
• Coordinate with security intelligence framework to obtain latestthreats & vulnerabilities
• Prepare security effectiveness reports for management
• Testingthe applications / systems for compliance to RBI / ReBIT InformationSecurity practices
• Ensurenew applications are inducted into Data centre after conducting pentesting / vulnerability assessment
• Prioritizing security vulnerabilities identified in ethical hacking,penetration testing and application / system testing based on business impactand update Security operations team for mitigating them
• Follow up on closure of these gaps and elevate when necessary
• Deciding the most relevant and applicable metrics for measuringsecurity effectiveness and deciding on the requisite algorithms for theirquantification

Certifications (any two)

• CISSP
• CEH / OSCP / OSCE /GPEN

Employment Type

All positions are onfixed term contract on a full-time basis exclusively for ReBIT, initially fora period of five years, extendable by mutual consent