Senior Engineer - VAPT (NGCB)

Darwinbox Digital Solutions Pvt. Ltd.; Navi Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ReBIT is seeking experienced information security professionals with hands-on pentesting, red teaming, and vulnerability assessment skills to safeguard RBI systems and critical assets.

The role requires testing across platforms (Web, mobile) and coordination with external teams, with a focus on aligning with RBI/ReBIT security standards and best practices.

Qualifications

• Must have a university degree in computer science or IT.
• Minimum 4 years of information security background.
• At least 2 years in penetration testing, red teaming or vulnerability assessment.
• Experience evaluating security controls via ethical hacking and pentesting.
• Hands-on black-box/grey-box testing on platforms like .NET, Java.
• Mobile testing experience on Android and iOS.
• Solid understanding of security architecture and infrastructure.
• Familiar with OWASP, SANS, ISACA, GAO, NIST and IETF best practices.

Responsibilities

• Conduct internal/third-party ethical hacking, vulnerability assessment, pentesting, and red team assessments on critical assets.
• Coordinate with RBI-related external pentesting services.
• Stay aligned with security intelligence for threats and vulnerabilities.
• Prepare security effectiveness reports for management.
• Test apps/systems for RBI/ReBIT security compliance.
• Induct new apps into the data center after pentesting/vuln assessment.
• Prioritize vulnerabilities and update Security Ops for mitigation.

Skills

Information security

Penetration testing

Red Team

Vulnerability assessment

Ethical hacking

Security testing

Mobile testing

OWASP knowledge

Education

Bachelor's degree in CS/IT

Tools

Android testing

iOS testing

Job description

Experience/ Qualifications

• University degree in the field of computer science or IT.
• 4+ years of Information Security background is essential.
• 2+ years of Penetration testing, Red teaming and or vulnerability assessment experience
• Experience in evaluating the control environment through EthicalHacking, Penetration Testing, Red Team assessments.
• Evaluation of security technologies to detect vulnerabilities
• Hands on experience in black-box, grey-box penetration testing onplatforms like .Net, Java etc.
• Hands on experience on mobile testing of android and IOS
• A high-level appreciation of Security Architecture and Infrastructure
• Should be familiar with the best practices of OWASP, SANS Institute,ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)
• Information technology

Responsibilities

• Conduct internal / third-party Ethical Hacking / VulnerabilityAssessment/ Penetration Testing, Red Team assessment on business-critical assets andprocesses.
• Liaison with external ethical hacking / penetration testing for RBIprojects
• Coordinate with security intelligence framework to obtain latestthreats & vulnerabilities
• Prepare security effectiveness reports for management
• Testingthe applications / systems for compliance to RBI / ReBIT InformationSecurity practices
• Ensurenew applications are inducted into Data centre after conducting pentesting / vulnerability assessment
• Prioritizing security vulnerabilities identified in ethical hacking,penetration testing and application / system testing based on business impactand update Security operations team for mitigating them

Certifications (any one)

• CEH / OSCP

Employment

• All positions are on fixed termcontract on a full-time basis exclusively for ReBIT, initially for aperiod of three years, extendable by mutual consent.