Technical Lead-Cybersecurity

Birlasoft; Dadri; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Birlasoft is seeking an experienced Vulnerability Assessment and Penetration Testing (VAPT) Specialist to lead security testing across applications, networks, cloud environments, and enterprise systems.

You will conduct authenticated/unauthenticated scans, perform manual testing, and validate findings. The role involves risk assessment, reporting, and collaboration with security/Dev teams to strengthen defenses.

Qualifications

• Experience leading vulnerability assessments across apps, networks, cloud, and infra.

Responsibilities

• Perform Vulnerability Assessments and Penetration Testing across web apps, APIs, and infrastructure.

Skills

VAPT Expertise

OWASP Top 10

MITRE ATT&CK

Cloud Security

Threat Modeling

SAST/DAST

Risk Assessment

Remediation Validation

Tools

Nessus

Burp Suite

Metasploit

Job description

Job Description:

Area(s) of responsibility

Role Summary

We are seeking an experienced Vulnerability Assessment and Penetration Testing (VAPT) Specialist responsible for identifying, assessing, and validating security vulnerabilities across applications, networks, cloud environments, infrastructure, APIs, and enterprise systems. The candidate will lead vulnerability assessments, penetration testing engagements, security reviews, risk analysis, and remediation validation activities to strengthen the organizations cybersecurity posture.

Key Responsibilities

• Perform Vulnerability Assessments and Penetration Testing across web applications, APIs, mobile applications, servers, databases, cloud environments, and network infrastructure.
• Conduct authenticated and unauthenticated vulnerability scans and validate findings through manual testing.
• Execute internal and external penetration testing exercises to identify security weaknesses and exploitation paths.
• Perform security assessments aligned to OWASP Top 10, MITRE ATT&CK, and industry best practices.
• Assess cloud environments for security misconfigurations, excessive permissions, exposed assets, and compliance gaps.
• Conduct source code security reviews and secure configuration assessments where applicable.
• Analyze vulnerabilities, determine business impact, assign risk ratings, and provide remediation recommendations.
• Validate remediation activities and perform re-testing of vulnerabilities.
• Prepare detailed technical reports, executive summaries, and risk assessment documentation.
• Work closely with infrastructure, application development, cloud, and security teams to drive remediation efforts.
• Support security audits, compliance assessments, and regulatory requirements.
• Monitor emerging threats, vulnerabilities, and attack techniques to improve assessment methodologies.
• Develop testing methodologies, assessment standards, SOPs, and operational runbooks.
• Support Red Team, Purple Team, and Security Operations initiatives when required.
• Participate in security architecture reviews and provide secure design recommendations.

Required Skills

Core Technical Skills

• Web Application Penetration Testing
• Network Penetration Testing
• API Security Testing
• Infrastructure Security Assessment
• Cloud Security Assessment
• Secure Configuration Reviews
• Threat Modeling
• Risk Assessment & Analysis
• Remediation Validation
• SAST,DAST

Security Frameworks & Methodologies

• OWASP Top 10
• OWASP ASVS
• OWASP API Security Top 10
• MITRE ATT&CK
• SANS Security Controls
• NIST Cybersecurity Framework
• CVSS Risk Scoring
• CIS Benchmarks

Requirements: