VAPT Specialist | Offensive Security & Penetration Testing Company: Foresee Security (NMT Security Inno

Foresee Security; Dadri; On-site; INR 700,000 - 1,100,000; Full time

Job summary

Foresee Security is hiring a VAPT Specialist with hands-on experience in vulnerability assessments, penetration testing, and offensive security. You will conduct assessments across web apps, APIs, networks, and cloud environments and work with our engineering team to improve detection capabilities.

This role requires 2 years practical experience, strong reporting skills, and comfort with Burp Suite, Nmap, Nuclei, Nessus, and OWASP ZAP. Immediate joiners preferred and on-site in Noida.

Qualifications

• 2 years hands-on experience in VAPT/penetration testing.
• Practical experience in web application, API and network penetration testing.
• Proficiency with Burp Suite, Nmap, Nuclei, Nessus and OWASP ZAP.
• Strong understanding of authentication flaws, access control vulnerabilities, injection attacks, SSRF and misconfigurations.
• Experience with manual vulnerability validation, exploitation and reporting.
• Basic scripting in Python, Bash or PowerShell.
• Good analytical, documentation and communication skills.

Responsibilities

• Conduct VAPT assessments across web applications, APIs, networks and cloud environments.
• Perform manual penetration testing and validate vulnerabilities beyond automated scanners.
• Identify security weaknesses using OWASP Top 10 and API Top 10 using industry methodologies.
• Prepare technical VAPT reports, risk ratings and remediation recommendations.
• Conduct vulnerability retesting and validate remediation effectiveness.
• Support customer security assessments and technical discussions.
• Collaborate with engineering to develop automated vulnerability detection rules and workflows.
• Assist with security assessments aligned to RBI, SEBI CSCRF, ISO 27001 and other frameworks.

Skills

VAPT

Penetration testing

Web application testing

API testing

Network testing

Burp Suite

Nmap

Nuclei

Nessus

OWASP ZAP

Scripting (Python, Bash, PowerShell)

Tools

Burp Suite

Nmap

Nuclei

Nessus

OWASP ZAP

Job description

Company: Foresee Security (NMT Security Innovations Pvt. Ltd.) Location: Noida | On-site

Experience: 2 Years

Employment: Full-time

Joining: Immediate Joiners Preferred

About the Role

We are hiring a VAPT Specialist with hands-on experience in vulnerability assessments, penetration testing, and offensive security.

The role involves conducting security assessments, identifying and validating vulnerabilities, preparing technical reports, and collaborating with our engineering team to enhance automated vulnerability detection capabilities.

Key Responsibilities

• Conduct VAPT assessments across web applications, APIs, networks, and cloud environments.
• Perform manual penetration testing and validate vulnerabilities beyond automated scanner results.
• Identify security weaknesses using OWASP Top 10, OWASP API Security Top 10, and industry-standard methodologies.
• Perform authorized vulnerability exploitation and document proof-of-concept evidence.
• Prepare technical VAPT reports, risk ratings, and remediation recommendations.
• Conduct vulnerability retesting and validate remediation effectiveness.
• Support customer security assessments and technical discussions.
• Collaborate with engineering teams to develop automated vulnerability detection rules, scripts, and scanning workflows.
• Support security assessments aligned with RBI, SEBI CSCRF, ISO 27001, and other applicable frameworks.

Required Skills

• 2 years of hands-on experience in VAPT or penetration testing.
• Practical experience in web application, API, and network penetration testing.
• Proficiency with Burp Suite, Nmap, Nuclei, Nessus, and OWASP ZAP.
• Strong understanding of authentication flaws, access control vulnerabilities, injection attacks, SSRF, and security misconfigurations.
• Experience with manual vulnerability validation, exploitation, and reporting.
• Basic scripting skills in Python, Bash, or PowerShell.
• Good analytical, documentation, and communication skills.

Preferred Qualifications

• Certifications such as OSCP, eWPT, PNPT, CPTS, CEH Practical, or CREST.
• Experience with AWS/Azure security assessments.
• Familiarity with Active Directory security testing.
• Experience writing custom Nuclei templates or vulnerability detection scripts.

  Who Should Apply?

  • We are looking for hands-on penetration testers who can identify, validate, and report real security vulnerabilities, rather than candidates who rely solely on automated scanning tools.