Senior Engineer - VAPT (NGCB)

Rebit; Navi Mumbai; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

ReBIT is seeking an experienced Information Security professional for hands-on ethical hacking, pentesting and red team assessments. The role focuses on protecting RBI-critical assets and ensuring alignment with IS practices and RBI guidelines.

You will coordinate with external vendors, contribute to threat intelligence efforts, and prepare management reports on security effectiveness. This is a full-time, fixed-term position based in Navi Mumbai, India.

Qualifications

• Bachelor's degree in computer science or IT.
• 4+ years of information security experience.
• 2+ years in penetration testing, red teaming or vulnerability assessment.
• Experience in evaluating controls through ethical hacking, pentesting and red team assessments.
• Familiar with RBI security requirements and related standards.

Responsibilities

• Conduct internal/third-party Ethical Hacking, Vulnerability Assessment, Penetration Testing, Red Team assessments on business-critical assets and processes.
• Liaison with external ethical hacking/penetration testing for RBI projects.
• Coordinate with security intelligence framework to obtain latest threats & vulnerabilities.
• Prepare security effectiveness reports for management.
• Prioritize security vulnerabilities identified in ethical hacking, penetration testing and application/system testing based on business impact and update Security Operations team.
• Test applications/systems for compliance to RBI/ReBIT Information Security practices.
• Ensure new applications are inducted into Data Centre after conducting pentesting/vulnerability assessment.

Skills

Information Security

Penetration Testing

Red Teaming

Vulnerability Assessment

Mobile Testing

Black-box Testing

Grey-box Testing

Security Architecture

OWASP

NIST

IETF

Education

University degree in Computer Science or IT

Tools

.NET

Java

Job description

Experience/ Qualifications

• University degree in the field of computer science or IT.
• 4+ years of Information Security background is essential.
• 2+ years of Penetration testing, Red teaming and or vulnerability assessment experience
• Experience in evaluating the control environment through EthicalHacking, Penetration Testing, Red Team assessments.
• Evaluation of security technologies to detect vulnerabilities
• Hands on experience in black-box, grey-box penetration testing onplatforms like .Net, Java etc.
• Hands on experience on mobile testing of android and IOS
• A high-level appreciation of Security Architecture and Infrastructure
• Should be familiar with the best practices of OWASP, SANS Institute,ISACA, GAO, FISCAM, NSA, NIST, Internet Engineering Task Force (IETF)
• Information technology

Responsibilities

• Conduct internal / third-party Ethical Hacking / VulnerabilityAssessment/ Penetration Testing, Red Team assessment on business-critical assets andprocesses.
• Liaison with external ethical hacking / penetration testing for RBIprojects
• Coordinate with security intelligence framework to obtain latestthreats & vulnerabilities
• Prepare security effectiveness reports for management
• Prioritizing security vulnerabilities identified in ethical hacking,penetration testing and application / system testing based on business impactand update Security operations team for mitigating them
• Testingthe applications / systems for compliance to RBI / ReBIT InformationSecurity practices
• Ensurenew applications are inducted into Data centre after conducting pentesting / vulnerability assessment

Certifications (any one)

• CEH / OSCP

Employment

• All positions are on fixed termcontract on a full-time basis exclusively for ReBIT, initially for aperiod of three years, extendable by mutual consent.