VAPT Analyst_ Chennai

Clover Infotech; Chennai; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Clover Infotech is seeking a VAPT Engineer with 4+ years of hands-on experience to assess web apps, APIs, networks, and cloud environments.

You will perform manual and automated testing, prepare detailed risk-based reports, and work with development and security teams to remediate findings while staying updated on the latest threats and tooling.

Certifications like CEH/OSCP are preferred, and familiarity with cloud security testing (AWS/Azure/GCP) is a plus.

Qualifications

• 4+ years of hands-on VAPT and cybersecurity testing experience.
• Strong knowledge of OWASP Top 10, SANS Top 25, and common attack vectors.
• Experience with security testing tools (Burp Suite, Nessus, Nmap, Metasploit, Wireshark, Acunetix, Qualys).
• Knowledge of web app, API, and network security testing.
• Familiarity with Linux, Windows, and cloud security concepts.
• Understanding of authentication, encryption, and secure coding practices.
• Experience in preparing technical and executive security reports.

Responsibilities

• Perform VAPT on web apps, mobile apps, APIs, networks, and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities.
• Follow industry standards (OWASP, NIST, PTES) for assessments.
• Execute network and web API security assessments and penetration tests.
• Prepare detailed vulnerability reports with risk ratings and remediation steps.
• Re-test to verify fixes and validate resolutions.

Skills

VAPT

OWASP Top 10

NIST

PTES

Burp Suite

Nessus

Nmap

Metasploit

Wireshark

Acunetix

Qualys

Web API security testing

Linux

Windows

Cloud security

Secure coding practices

Education

Bachelor's degree in Computer Science/Information Security/Cybersecurity

Tools

Burp Suite

Nessus

Nmap

Metasploit

Wireshark

Acunetix

Qualys

Job description

We are seeking a skilled VAPT Engineer with 4+ years of experience in Vulnerability Assessment and Penetration Testing. The candidate will be responsible for identifying security vulnerabilities in web applications, APIs, networks, cloud environments, and infrastructure, and providing remediation recommendations to enhance the organization's security posture.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities and security weaknesses.
• Perform security assessments based on industry standards such as OWASP, NIST, and PTES.
• Execute network penetration testing, web application penetration testing, and API security assessments.
• Prepare detailed vulnerability assessment reports with risk ratings and remediation recommendations.
• Validate and verify vulnerability fixes through re-testing activities.
• Collaborate with development, infrastructure, and security teams to address identified security issues.
• Conduct source code reviews and secure code assessments (preferred).
• Support compliance requirements related to information security and cybersecurity.
• Stay updated with the latest cybersecurity threats, attack techniques, and security tools.

Required Skills

• 4+ years of hands-on experience in VAPT and cybersecurity testing.
• Strong understanding of OWASP Top 10, SANS Top 25, and common attack vectors.
• Experience with tools such as Burp Suite, Nessus, Nmap, Metasploit, Wireshark, Acunetix, and Qualys.
• Knowledge of web application security testing, API security testing, and network security assessment.
• Familiarity with Linux, Windows, and cloud security concepts.
• Understanding of authentication mechanisms, encryption, and secure coding practices.
• Experience in preparing technical and executive-level security reports.

Preferred Qualifications

• Certifications such as CEH, OSCP, eJPT, eCPPT, CREST, or equivalent.
• Experience with cloud security testing (AWS, Azure, GCP).
• Knowledge of DevSecOps and Secure SDLC practices.

Education

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

Notice Period

• Immediate