Senior Associate - Cyber Security - VAPT

BDO India; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

BDO India Services Private Limited invites applications for a Senior VAPT Lead role within the Banking sector. You will lead vulnerability management and penetration testing engagements, mentor security consultants, and ensure high-quality deliverables for enterprise clients.

The role requires 2–7 years in VAPT, relevant certifications, and strong knowledge of network and application security. You will collaborate with cross-functional teams and liaise with clients to drive secure outcomes.

Qualifications

• 2–7 years of VAPT experience and relevant project exposure.
• Graduate or postgraduate degree in engineering, CS/IT/cybersecurity or related field.
• VAPT certifications: CEH, OSCP, OSCE, GPEN or equivalent.

Responsibilities

• Lead and mentor a team of cybersecurity consultants and analysts.
• Allocate work, monitor project progress, and ensure timely delivery of engagements.
• Review penetration testing reports and ensure high-quality deliverables.
• Coach junior team members through technical reviews and knowledge-sharing sessions.
• Serve as technical lead on Cyber Security Assessment projects including VAPT, network security, secure configuration review, and firewall reviews.
• Manage day-to-day client relationships at mid and lower levels.
• Possess knowledge of TCP/IP and networks, including firewalls, IDS/IPS, routers, switches.
• Experience in Infrastructure Penetration Testing and Application Security Testing.

Skills

VAPT Leadership

Team Mentoring

Client Relationship Management

Network Security

Scripting (Python/Shell)

Education

Bachelor's or Master's in Engineering/CS/IT/Cybersecurity/Business

Tools

Burp Suite

OWASP ZAP

Acunetix

Nessus

Nmap

ffuf

wfuzz

nikto

AppScan

Job description

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. It's a leading service provider for the mid markets with client service at its heart.

BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold

Role:

You will lead Vulnerability Management and Penetration Testing (VMPT) engagement track for Banking Industry, manage a team of security consultants, and deliver high-quality cybersecurity assessments for enterprise clients.

Experience and Qualification:

• 2-7 Years of experience in VAPT (Vulnerability Assessment and Penetration Testing)
• Graduate / Postgraduate in Engineering, computer science, Information Technology, Cybersecurity, Business, or a related field.
• VAPT-related certifications (e.g., CEH, OSCP, OSCE, GPEN or equivalent).

Responsibilities:

• Lead and mentor a team of cybersecurity consultants and analysts.
• Allocate work, monitor project progress, and ensure timely delivery of engagements.
• Review penetration testing reports and technical deliverables to maintain quality standards.
• Coach junior team members through technical reviews, knowledge-sharing sessions, and hands-on mentoring
• Serves as technical lead or subject matter specialist on Cyber Security Assessment projects covering either vulnerability assessment & penetration testing, network security architecture review, secure configuration/code review, firewall ruleset reviews
• Experience with Vulnerability Management tools: Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify, etc.
• Manage day-to-day client relationships at mid and lower levels.
• Good knowledge of TCP/ IP and Networks, including Firewalls, IDS/IPS, Routers, Switches, and network architecture
• Experience in Infrastructure Penetration Testing and Application Security Testing
• Demonstrates ability to work independently on projects with limited supervision and lead a small team with assistance from Managers
• Experience in Secure Code Review
• Experience conducting Network Security Architecture Reviews and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Experience in basic scripting such as Shell, Python, PERL, etc.
• Strong analytical and communication skills (written, verbal, and presentation)
• Open to learning new tools and technologies as per the project requirement
• Interactive with team members and confident during client meetings under the guidance of senior members of the project
• Be deadline-oriented and quality-focused
• Familiarity with industry standards and frameworks such as OWASP, CIS, and ISO27001 Key

Technical Skills:

• Hands-on experience performing Network, Web, API, Mobile, and Thick Client application security testing.
• Proficient in using manual and automated application and network security tools such as Burp Suite, OWASP ZAP, Acunetix, ffuf, wfuzz, nikto, Nmap, and Nessus.
• Basic Knowledge of programming languages like C/C++, C#, JAVA, and ASP.NET, and familiarity with PERL/Python Scripting.
• Basic Knowledge of the cloud environment and its various components.
• Familiar with OWASP and Secure SDLC standards.
• Offensive security skill sets include backdoors, keyloggers, password dumpers, and spear phishing payloads.
• Deliver Red Team Exercises and augment Senior Red Teamers.
• Knowledge of standard security requirements within ASP.NET applications.
• Good Knowledge of TCP/IP, Network Security.
• Ability to automate certain security test cases or write PoC using a scripting language (Python, Shell Script, Ruby/Perl, etc.) wherever required