VAPT Tester (Need Immediate Joiner)

Utkarsh Small Finance Bank; Navi Mumbai, Varanasi; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Utkarsh Small Finance Bank is seeking a security testing professional to lead VAPT across web, mobile, APIs, networks, and servers. You will perform manual and automated testing using Burp Suite, Nessus, Qualys, and Kali Linux, and compile findings with evidence and remediation recommendations.

Collaborate with Application, Infra, and Security teams to ensure timely remediation, retesting, and closure, while supporting audits and regulatory compliance requirements.

Qualifications

• Experience conducting security assessments and managing VAPT programs.
• Familiarity with CVSS/CVE and risk-based remediation.
• Ability to coordinate across security, infra, and app teams.

Responsibilities

• Monitor vulnerability in public attack surface and cloud security posture.
• Perform VAPT for web/mobile apps, APIs, networks, and servers.
• Prepare VAPT reports with findings and remediation recommendations.
• Coordinate remediation with multiple teams and assist audits/regulatory assessments.

Skills

Security testing

Penetration testing

Vulnerability assessment

Tools

Burp Suite

Nessus

Qualys

Nmap

Metasploit

OWASP ZAP

Kali Linux

Job description

Role & responsibilities

• Monitor & track security vulnerability in the public attack surface, Evaluate security posture in cloud WAF and other related cloud technologies.
• Track progress, prepare periodic reports and share upstream for review and approval.
• Assistance to Vendor Risk Assessment (VRA) cycle from scheduling to the closure of the report
• Conduct VAPT for Web Applications, Mobile Applications, APIs, Networks and Servers.
• Perform manual and automated penetration testing using Burp Suite, Nessus, Qualys, Nmap, Metasploit, OWASP ZAP and Kali Linux.
• Identify, validate and categorize security vulnerabilities based on CVSS/CVE and business impact.
• Perform security assessments covering OWASP Top 10, authentication, authorization, access control, configuration and business-logic vulnerabilities.
• Prepare VAPT reports with findings, risk ratings, evidence/PoC and remediation recommendations.
• Assistance in selection of vendors for services viz., VRA, VAPT, Red team exercises, Configuration reviews, AST/Source Code Reviews, other security assessments/reviews
• Coordinate with Application, Infrastructure and Security teams for remediation, re-testing and closure.
• Support internal/external audits, regulatory assessments and compliance requirements.