Sr. VAPT & Penetration Specialist

NETCLUES; Ahmedabad District; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Netclues is seeking a highly experienced Senior VAPT & Penetration Testing Specialist to lead vulnerability assessments across web, mobile, network, API, and cloud environments. You will validate findings, review reports, and ensure adherence to OWASP, PTES, NIST, and MITRE ATT&CK.

As a technical lead, you will mentor junior team members, drive methodology improvements, and communicate risk-based recommendations to clients, while staying ahead of evolving threats and tooling.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
• 3–5 years of hands-on experience in VAPT and penetration testing.
• In-depth knowledge of web, network, mobile, cloud, and API security.
• Strong understanding of secure coding practices and vulnerability management.

Responsibilities

• Conduct in-depth vulnerability assessments and penetration tests across web, mobile, network, API, and cloud environments.
• Utilize industry-standard tools like SQLMap, Burp Suite, Nessus, Nmap, and custom scripts for exploitation.
• Simulate diverse attacks to identify system vulnerabilities.
• Review technical deliverables and verify findings and recommendations.

Skills

VAPT & Penetration Testing

Web Security

Network Security

Cloud Security

Communication

Education

Bachelor’s or Master’s in CS/Cybersecurity

Tools

SQLMap

Burp Suite

Nessus

Nmap

Custom scripts

Job description

Apply for Sr. VAPT & Penetration Specialist

We are seeking a highly experienced "Senior VAPT & Penetration Testing Specialist" to lead and ensure the quality and effectiveness of our vulnerability assessment and penetration testing operations. This role involves findings, validating findings, reviewing technical reports, ensuring compliance with standards (OWASP, PTES, NIST, etc.), and improving methodologies and tools.

Key Responsibilities:

• Conduct in-depth vulnerability assessments and penetration tests on web, mobile, network, API, and cloud infrastructure using manual and automation.
• Utilize industry-standard tools like SQLMap, Burp Suite, Nessus, Nmap, and custom scripts for advanced exploitation techniques.
• Simulate various cyber-attacks including DDoS, Brute Force, XSS, SQL Injection, DNS attacks, and Social Engineering to identify system vulnerabilities.
• Perform peer reviews of technical deliverables and verify accuracy of findings and recommendations.
• Ensure that all assessments are aligned with industry standards such as OWASP, PTES, MITRE ATT&CK, and NIST.
• Act as a technical lead and mentor for junior VAPT team and QA team members.
• Identify gaps in the current testing methodologies and implement process improvements.
• Prepare detailed documentation and the VA report and ensure clear, actionable, and risk-rated reporting.
• Collaborate with clients and internal teams to understand scope and provide post-assessment clarifications.
• Present the client meeting for the future VAPT assignments.
• Stay updated with emerging threats, tools, techniques, and frameworks.

Required Skills & Qualifications:

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field.
• 3 to 5 years of hands-on experience in VAPT and penetration testing.
• In-depth knowledge of web, network, mobile, cloud, and API security.
• Strong understanding of secure coding practices and vulnerability management.
• Familiarity with SIEM, IDS/IPS, EDR tools is a plus.
• Excellent report writing and documentation skills.
• Strong communication and overseas client-interaction skills.

Preferred Certifications:

• OSCP (Offensive Security Certified Professional) - Highly preferred
• CEH (Certified Ethical Hacker)
• ISO 27001 Lead Auditor or Lead Implementer - Added advantage