Vapt Engineer

Induct Hr Solutions; Thrissur; On-site; INR 1,100,000 - 1,800,000; Full time

Job summary

Induct Hr Solutions in Thrissur is seeking an experienced VAPT Engineer with 3+ years of hands-on security testing across applications and infrastructure. You will identify vulnerabilities, perform VAPT across web apps, APIs, mobile apps, and networks, and produce detailed reports with remediation guidance.

The role emphasizes collaboration with development and operations teams, requires knowledge of OWASP Top 10, and familiarity with tools like Burp Suite, ZAP, Nmap, Nessus, and Metasploit.

Qualifications

• Minimum 3+ years in VAPT / cybersecurity / application security.
• Strong knowledge of OWASP Web and API Security.
• Experience with web/API/mobile security testing and reporting.
• Ability to collaborate with dev and infra teams for remediation.
• Bachelor’s degree in CS/IT/Cybersecurity or related field.

Responsibilities

• Perform VAPT for web apps, APIs, mobile apps, and infrastructure.
• Conduct black-box, grey-box, and white-box testing as required.
• Identify and validate vulnerabilities including OWASP Top 10, SQLi, XSS, and more.
• Prepare detailed VAPT reports with risk ratings, evidence, and remediation guidance.
• Work with development and infrastructure teams for remediation and retesting.
• Conduct security retesting and stay updated on CVEs and best practices.

Skills

VAPT experience

Security testing

Reporting & remediation

Python scripting

Cloud basics

Networking basics

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Burp Suite

OWASP ZAP

Nmap

Nessus

Qualys

Metasploit

SQLMap

Postman

Job description

Job Title: VAPT Engineer 3+ Years Experience

Job Location: Thrissur | Work from Office | Mon - Sat

Experience: 3 - 5 yrs
Notice Period: Immediate Joiners (need to join within 1-2 weeks)

Candidate location: Prefers candidates from Kerala

Job Summary

We are looking for an experienced Vulnerability Assessment and Penetration Testing (VAPT) Engineer with 3+ years of experience in application and infrastructure security testing. The candidate will be responsible for identifying security vulnerabilities, performing penetration testing, preparing detailed reports, and supporting remediation activities.

Key Responsibilities:

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, mobile applications, and infrastructure.
• Conduct black-box, grey-box, and white-box security testing based on project requirements.
• Identify and validate vulnerabilities such as:
• OWASP Top 10
• SQL Injection
• Cross-Site Scripting (XSS)
• Authentication and authorization issues
• Broken access control
• SSRF
• CSRF
• Security misconfiguration
• API vulnerabilities
• Business logic vulnerabilities
• Perform API security testing, including authentication, authorization, token validation, rate limiting, and API abuse scenarios.
• Conduct network and infrastructure VAPT, including server, network, firewall, and exposed services.
• Perform vulnerability scanning and manual validation using industry-standard tools.
• Analyze scan results and eliminate false positives through manual verification.
• Prepare detailed VAPT reports with vulnerability description, risk rating, evidence, business impact, and remediation recommendations.
• Work with development and infrastructure teams to support vulnerability remediation and retesting.
• Conduct security retesting to verify that identified vulnerabilities have been properly fixed.
• Maintain knowledge of emerging vulnerabilities, CVEs, attack techniques, and security best practices.
• Ensure testing activities comply with organizational security policies and applicable regulatory requirements.

Required Technical Skills

• Minimum 3 years of experience in VAPT / Cybersecurity / Application Security.
• Strong knowledge of OWASP Web and API Security.
• Experience with tools such as:
• Burp Suite
• OWASP ZAP
• Nmap
• Nessus / Qualys
• Metasploit
• SQLMap
• Postman
• Good understanding of:
• HTTP/HTTPS
• REST APIs
• JWT/OAuth/OIDC
• TCP/IP and networking
• Linux and Windows
• Web application architecture
• Databases and SQL
• Ability to perform manual penetration testing, not just automated vulnerability scanning.
• Basic scripting knowledge in Python, PowerShell, Bash, or similar languages is desirable.
• Knowledge of cloud security, preferably Azure/Oracle Cloud/AWS, would be an advantage.

Certifications – Preferred

• CEH
• OSCP
• eJPT
• CompTIA Security+
• CREST certifications
• Other recognized cybersecurity/VAPT certifications

Educational Qualification

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Key Competencies

• Strong analytical and problem-solving skills.
• Good understanding of security risks and their business impact.
• Ability to communicate vulnerabilities clearly to technical and business teams.
• Good documentation and report-writing skills.
• Ability to work independently as well as with development and infrastructure teams.