VAPT consultant

Cyraac Services; Pune District; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Cyraac Services in Pune is seeking a VAPT Consultant with 1-3 years of hands-on experience in security testing for web, mobile, APIs, and cloud-native environments. You will identify vulnerabilities, validate controls, and provide remediation guidance while supporting secure software development practices and DevSecOps.

The role covers SAST/DAST, SCA, secrets detection, IaC security, container reviews, and AI/ML security concepts including LLM safety.

Qualifications

• Hands-on VAPT for web, mobile, and APIs in cloud-native environments.
• Assess AI/ML pipelines and LLM security concepts.
• Promote secure SDLC and CI/CD integration of security controls.
• Prepare detailed security assessment reports with risk ratings and remediation ideas.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, and APIs.
• Conduct security testing and validation for AI/ML applications and Large Language Model (LLM) integrations.
• Assist in reviewing AI/ML pipelines, training data security, and deployment configurations.
• Participate in secure architecture reviews and threat modelling exercises.
• Support DevSecOps initiatives by integrating security controls into CI/CD pipelines and promoting Shift-Left security practices.
• Perform SAST, DAST, SCA, secrets detection, and IaC security assessments.
• Review containerized environments and IaC configurations for security best practices.
• Work with development teams to promote secure coding standards and remediation.
• Prepare detailed security assessment reports with findings, risk ratings, and recommendations.
• Stay updated with latest cybersecurity threats and industry best practices.

Skills

VAPT experience

Vulnerability assessment

Penetration testing

OWASP Top 10

OWASP API Security Top 10

Mobile application security

DevSecOps

CI/CD security

AI/ML security concepts

Cloud security basics

Secure coding practices

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Burp Suite

OWASP ZAP

Nmap

Postman

Docker

Kubernetes

Job description

Position: VAPT Consultant - AI and ML
Experience: 1-3 Years
Location: Pune

Job Summary

We are looking for a VAPT Consultant with 1-3 years of hands-on experience in application security and penetration testing. The ideal candidate should have experience in conducting security assessments for web applications, mobile applications, APIs, and cloud-native environments, with exposure to DevSecOps and emerging AI/LLM security concepts. The consultant will be responsible for identifying security vulnerabilities, validating security controls, and providing remediation recommendations while supporting secure software development practices.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, and APIs.
• Conduct security testing and validation for AI/ML applications and Large Language Model (LLM) integrations, including assessment of model behaviour, resilience, and common AI security risks.
• Assist in reviewing AI/ML pipelines, training data security, and deployment configurations to identify potential security gaps.
• Participate in secure architecture reviews and threat modelling exercises using methodologies such as STRIDE and MITRE ATT&CK.
• Support DevSecOps initiatives by integrating security controls into CI/CD pipelines and promoting Shift-Left security practices.
• Perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), secrets detection, and Infrastructure as Code (IaC) security assessments.
• Review containerized environments and Infrastructure as Code configurations for security best practices and vulnerabilities.
• Work with development teams to promote secure coding standards and assist in vulnerability remediation and verification.
• Prepare detailed security assessment reports with technical findings, business impact, risk ratings, and remediation recommendations.
• Stay updated with the latest cybersecurity threats, attack techniques, and industry best practices.

Required Skills

• 1-3 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT).
• Good understanding of OWASP Top 10, OWASP API Security Top 10, and mobile application security concepts.
• Hands-on experience with tools such as Burp Suite, OWASP ZAP, Nmap, Postman, and other security testing tools.
• Basic knowledge of AI/ML and LLM security concepts, including prompt injection and model security fundamentals.
• Understanding of DevSecOps practices, CI/CD pipelines, and security automation.
• Familiarity with SAST, DAST, SCA, secrets detection, container security, and Infrastructure as Code (IaC) security.
• Basic understanding of cloud platforms (AWS, Azure, or GCP), Docker, Kubernetes, networking, authentication mechanisms, and secure application development.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Security certifications such as CEH, eJPT, Security+, PNPT, or equivalent will be an added advantage.