VAPT TRAINER - CYBERSECURITY

C3i Hub; Dholka; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

C3iHub, IIT Kanpur, is seeking a technically strong and hands-on Vulnerability Assessment and Penetration Testing (VAPT) Trainer. The successful candidate will deliver practical cybersecurity training, develop lab exercises, demonstrate security testing methodologies, and help participants build job-ready skills in authorized and controlled environments.

The role involves lab setup, tool management, and reporting.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related discipline.
• Minimum 3 years of VAPT, penetration testing, or cybersecurity training with hands-on exposure.
• Demonstrated ability to conduct security testing and troubleshoot technical issues independently.
• Experience delivering technical training, workshops, or knowledge-sharing sessions preferred.
• Certifications such as OSCP, CEH, eJPT, PNPT, PenTest+ desirable.

Responsibilities

• Deliver instructor-led VAPT, ethical hacking, network security, and web application security training.
• Develop labs, assignments, quizzes, and practical assessments.
• Demonstrate reconnaissance, port scanning, vulnerability identification in labs.
• Prepare VAPT reports with evidence, severity ratings, impact, and remediation guidance.
• Maintain up-to-date training content aligned with current security practices.

Skills

VAPT knowledge

Lab delivery

Technical reporting

Training delivery

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Nmap

Burp Suite

Metasploit Framework

Wireshark

Nessus

OpenVAS/GVM

Nikto

Gobuster

SQLmap

Netcat

Job description

About the Role

C3iHub, IIT Kanpur, is seeking a technically strong and hands-on Vulnerability Assessment and Penetration Testing (VAPT) Trainer. The successful candidate will deliver practical cybersecurity training, develop lab exercises, demonstrate security testing methodologies, and help participants build job-ready skills in authorized and controlled environments.

Key Responsibilities

Training Delivery

• Deliver instructor-led sessions on VAPT, ethical hacking, network security, and web application security.
• Conduct tool-based demonstrations, guided hands-on labs, workshops, and scenario-based exercises.
• Explain technical concepts clearly to participants with varied levels of experience.
• Develop assignments, quizzes, practical assessments, and case studies.

Vulnerability Assessment and Penetration Testing

• Demonstrate reconnaissance, information gathering, port scanning, service enumeration, and vulnerability identification.
• Conduct web application security testing, including OWASP Top 10 topics such as SQL injection, cross-site scripting (XSS), access-control weaknesses, and authentication/session issues.
• Explain network penetration testing, privilege escalation, and post-exploitation concepts in approved lab environments.
• Manually validate findings, assess severity and business impact, and recommend practical remediation.

Lab Setup and Tool Management

• Configure and maintain isolated training labs using Kali Linux, virtual machines, Docker, and intentionally vulnerable applications.
• Use platforms such as DVWA, OWASP Juice Shop, and Metasploitable for practical exercises.
• Demonstrate tools such as Nmap, Burp Suite, Metasploit Framework, Wireshark, Nessus, OpenVAS/GVM, Nikto, Gobuster, SQLmap, and Netcat.
• Troubleshoot lab configuration, networking, tool installation, and participant technical issues.

Reporting and Content Development

• Prepare professional VAPT reports with evidence, severity ratings, impact, and remediation guidance.
• Create and update presentations, lab manuals, technical documentation, and practical demonstrations.
• Evaluate participants through practical tests and provide constructive feedback.
• Keep training content aligned with current security testing practices and methodologies.

Essential Technical Skills

• Strong practical knowledge of VAPT methodologies and vulnerability validation.
• Network security fundamentals, TCP/IP, common protocols, ports, and service enumeration.
• Web application security testing and OWASP Top 10.
• Hands-on experience with Kali Linux and familiarity with Windows security.
• Ability to interpret scanner output, reproduce findings safely, and recommend remediation.
• Technical reporting and documentation.

Qualifications and Experience

• Bachelor s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related discipline.
• Minimum 3 years of relevant professional experience in VAPT, penetration testing, security assessment, or cybersecurity training with substantial hands-on exposure.
• Demonstrable ability to conduct security testing and troubleshoot technical issues independently.
• Experience delivering technical training, workshops, or knowledge-sharing sessions is preferred.
• Relevant certifications such as OSCP, CEH, eJPT, PNPT, CompTIA PenTest+, or equivalent are desirable; practical competence is a key consideration.

Preferred Additional Skills

• Active Directory security testing and Windows/Linux privilege escalation.
• API security testing and basic mobile application security testing.
• Python, Bash, or PowerShell scripting.
• CTF platforms, lab automation, and virtualized training environments.
• Familiarity with OWASP, NIST, and PTES guidance.
• Experience training government organizations, public-sector undertakings, law enforcement, or enterprise teams.

Training and Communication Skills

• Strong command of hands-on demonstrations and lab delivery.
• Ability to explain complex topics in simple, structured language.
• Patient, methodical troubleshooting and effective participant guidance.
• Good presentation, verbal communication, and technical writing skills.
• Ability to work to training schedules and develop practical assessments.

Candidate Evaluation

• Technical interview on VAPT methodology and security concepts.
• Live practical assessment covering enumeration, web testing, vulnerability validation, and remediation.
• Preparation or explanation of a sample VAPT report.
• A 15-20 minute teaching demonstration using an authorized lab.

Key Performance Expectations

• Quality and effectiveness of training delivery.
• Relevance, reliability, and safety of hands-on lab exercises.
• Participant engagement and improvement in practical competency.
• Accuracy of technical content and timely completion of training deliverables.

Required Skills

Cybersecurity training vapt