Vapt Engineer

Writer Corporation; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Writer Corporation in Mumbai is seeking a Security Analyst with expertise in Application Security and VAPT. The ideal candidate will conduct comprehensive security assessments, perform security testing, and ensure secure coding practices within development teams.

The role requires 5+ years of experience and a Bachelor's degree in a relevant field, along with CEH certification. Strong skills in VAPT and familiarity with tools like SonarQube and Fortify are essential.

Qualifications

• 5+ years of experience in Application Security and VAPT.
• Strong understanding of security vulnerabilities and secure coding principles.
• Experience with manual penetration testing techniques.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for various applications.
• Conduct Static and Dynamic Application Security Testing (SAST and DAST).
• Prepare detailed security assessment reports for stakeholders.

Skills

Web Application VAPT

API Security

Mobile Application VAPT

OWASP Top 10

SAST tools

DAST tools

Secure Coding

Penetration Testing

Cloud Security Testing

Education

Bachelor’s degree in Computer Science

Bachelor’s degree in Cyber Security

Bachelor’s degree in Information Technology

Tools

SonarQube

Fortify

Burp Suite

Job description

Job Title: Security Analyst Application Security (VAPT)

Experience: 5+ Years

Location: Client Location

Certification: CEH (Certified Ethical Hacker) – Mandatory

Job Summary

We are seeking an experienced Security Analyst with strong expertise in Application Security and VAPT to join our security team. The ideal candidate will be responsible for conducting comprehensive security assessments of web and mobile applications, performing secure code reviews, and supporting the organization in strengthening its overall application security posture.

Key Responsibilities

Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, network and APIs.

Conduct Static Application Security Testing (SAST) to identify security vulnerabilities in source code.

Perform Dynamic Application Security Testing (DAST) to detect runtime vulnerabilities in applications.

Carry out Secure Code Reviews to identify security flaws and recommend remediation.

Perform Software Composition Analysis (SCA) to identify vulnerabilities in third-party libraries and open-source components.

Identify, analyze, and validate security vulnerabilities and provide detailed risk-based reports with remediation recommendations.

Work closely with development and DevOps teams to ensure secure coding practices and assist in vulnerability remediation.

Conduct re-testing and validation of vulnerabilities after remediation.

Prepare and present detailed security assessment reports to internal stakeholders and clients.

Required Skills

Strong hands-on experience in Web Application VAPT, APIs and Mobile Application VAPT.

Solid understanding of OWASP Top 10, API Security Top 10, and common application security vulnerabilities.

Experience in SAST, DAST, and SCA tools and methodologies.

Knowledge of secure coding principles and common programming vulnerabilities.

Experience in manual penetration testing techniques and vulnerability validation.

Understanding of authentication, authorization, session management, and cryptographic security issues.

Tools & Technologies

Hands-on experience with the following tools is required:

SonarQube, Fortify, Burp Suite and other application security and penetration testing tools.

Education

Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or any other degree.

Certification

CEH (Certified Ethical Hacker) – Mandatory

Preferred Skills

Knowledge of CI/CD security integration.

Experience in cloud security testing (AWS / Azure / GCP) is an added advantage.

Strong communication skills for client interaction and technical reporting.

Soft Skills

Strong analytical and problem-solving skills

Ability to work independently and manage multiple assessments

Good documentation and reporting capabilities