Vapt Engineer

Pratyin Infotech; Shillong; On-site; INR 600,000 - 1,400,000; Full time

Job summary

Pratyin Infotech is seeking a VAPT Security Analyst to perform comprehensive vulnerability assessments and penetration testing across web applications, APIs, and networks. You will conduct authenticated and unauthenticated testing, validate findings manually, and document risks with actionable remediation guidance.

You will also support secure code reviews, retesting after fixes, and help ensure compliance with testing standards and organizational policies.

Qualifications

• VAPT testing experience across web apps, APIs and networks.
• Ability to perform authenticated/unauthenticated vulnerability assessments.
• Manual testing to validate vulnerabilities and exploitability.

Responsibilities

• Execute vulnerability assessment and penetration testing (VAPT) for Web applications, APIs, and networks/infrastructure.
• Perform authenticated and unauthenticated vulnerability assessments.
• Conduct manual penetration testing to validate identified vulnerabilities and assess exploitability.
• Prepare comprehensive VAPT reports with technical evidence, risk details, and remediation recommendations.
• Support secure code review activities.
• Perform retesting after remediation and provide vulnerability closure confirmation.
• Maintain VAPT documentation, testing methodologies, and tools.
• Support security compliance and audit assessments as required.
• Ensure testing activities follow standards, approved scope, and policies.

Skills

VAPT testing

Web applications

APIs

Networks

Job description

Key Responsibilities

• Execute Vulnerability Assessment and Penetration Testing (VAPT) for:
  • Web applications
  • APIs
  • Networks and infrastructure
• Perform authenticated and unauthenticated vulnerability assessments.
• Conduct manual penetration testing to validate identified vulnerabilities and assess exploitability.
• Prepare comprehensive VAPT reports with technical evidence, risk details, and actionable remediation recommendations.
• Support secure code review activities.
• Perform retesting after remediation and provide vulnerability closure confirmation.
• Maintain VAPT documentation, testing methodologies, and associated tools.
• Support security compliance and audit assessments, as required.
• Ensure all testing activities follow applicable security testing standards, approved scope, and organizational policies.