Walk-in | VAPT Analyst_ Chennai

Clover Infotech; Chennai; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Clover Infotech in Chennai seeks a VAPT Engineer with 4+ years of hands-on security testing across web, mobile, APIs, networks and cloud environments. The role focuses on identifying vulnerabilities and providing actionable remediation guidance to strengthen security posture.

You will perform both manual and automated testing, prepare risk-rated reports, and collaborate with development, infrastructure and security teams to address findings while staying current with evolving threats.

Qualifications

• 4+ years of hands-on VAPT and cybersecurity testing.
• Strong knowledge of OWASP Top 10 and SANS Top 25.
• Experience with Burp Suite, Nessus, Nmap, Metasploit, Wireshark, Acunetix, and Qualys.
• Familiarity with Linux, Windows, and cloud security concepts.
• Ability to prepare technical and executive-level security reports.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities and security weaknesses.
• Perform security assessments based on industry standards such as OWASP, NIST, and PTES.
• Execute network penetration testing, web application penetration testing, and API security assessments.
• Prepare detailed vulnerability assessment reports with risk ratings and remediation recommendations.
• Validate and verify vulnerability fixes through re-testing activities.

Skills

VAPT experience

OWASP Top 10

SANS Top 25

Web/API security

Linux/Windows

Education

Bachelor's degree in Computer Science

Tools

Burp Suite

Nessus

Nmap

Metasploit

Wireshark

Acunetix

Qualys

Job description

We are seeking a skilled VAPT Engineer with 4+ years of experience in Vulnerability Assessment and Penetration Testing. The candidate will be responsible for identifying security vulnerabilities in web applications, APIs, networks, cloud environments, and infrastructure, and providing remediation recommendations to enhance the organization's security posture.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, mobile applications, APIs, networks, and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities and security weaknesses.
• Perform security assessments based on industry standards such as OWASP, NIST, and PTES.
• Execute network penetration testing, web application penetration testing, and API security assessments.
• Prepare detailed vulnerability assessment reports with risk ratings and remediation recommendations.
• Validate and verify vulnerability fixes through re-testing activities.
• Collaborate with development, infrastructure, and security teams to address identified security issues.
• Conduct source code reviews and secure code assessments (preferred).
• Support compliance requirements related to information security and cybersecurity.
• Stay updated with the latest cybersecurity threats, attack techniques, and security tools.

Required Skills

• 4+ years of hands-on experience in VAPT and cybersecurity testing.
• Strong understanding of OWASP Top 10, SANS Top 25, and common attack vectors.
• Experience with tools such as Burp Suite, Nessus, Nmap, Metasploit, Wireshark, Acunetix, and Qualys.
• Knowledge of web application security testing, API security testing, and network security assessment.
• Familiarity with Linux, Windows, and cloud security concepts.
• Understanding of authentication mechanisms, encryption, and secure coding practices.
• Experience in preparing technical and executive-level security reports.

Preferred Qualifications

• Certifications such as CEH, OSCP, eJPT, eCPPT, CREST, or equivalent.
• Experience with cloud security testing (AWS, Azure, GCP).
• Knowledge of DevSecOps and Secure SDLC practices.

Education

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

Notice Period

• Immediate