Vulnerability Assessment and Penetration Testing (VAPT) Engineer

Motion Recruitment; Boston (MA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

Competitive base pay plus bonus

Generous PTO

401k plus match

Job summary

Motion Recruitment is seeking an experienced VAPT Engineer to identify vulnerabilities across applications, APIs, and mobile platforms. This hybrid, hands-on role focuses on testing, managing VAPT tools, and providing actionable remediation guidance.

You will explore AI-assisted testing, stay current with new threats, and collaborate with engineering teams to reduce risk. A strong foundation in ethical hacking, vulnerability assessment, and reporting is required, along with relevant

Qualifications

• Bachelor’s degree in Computer Science or equivalent experience.
• CISSP and OSCP certifications required.
• GIAC GPEN, GAIPT, or GWAPT preferred.
• Strong understanding of ethical hacking, vulnerability assessments, and penetration testing.
• Experience identifying, validating, and prioritizing vulnerabilities.
• Strong communication and technical reporting skills.

Responsibilities

• Conduct vulnerability assessments and penetration tests across applications, APIs, and platforms.
• Manage VAPT tools, processes, and testing methodologies.
• Document findings and recommend practical remediation steps.
• Collaborate with technical teams to reduce security risks.
• Stay current with emerging vulnerabilities, attack techniques, and security best practices.

Skills

Ethical hacking

Vulnerability assessment

Penetration testing

Strong communication

Technical reporting

Education

Bachelor’s degree in Computer Science or equivalent experience

CISSP and OSCP certifications

GIAC GPEN, GAIPT, or GWAPT preferred

Tools

Nessus

AppScan

Burp Suite

Nipper

Trustwave

Wireshark

Kali Linux

Metasploit

Job description

We’re looking for an experienced VAPT Engineer to identify security vulnerabilities and strengthen the security of applications, systems, and platforms. This hybrid role focuses on hands-on security testing, managing VAPT tools, and providing actionable recommendations to reduce risk.

You’ll conduct assessments across web applications, APIs, and mobile platforms while exploring AI-assisted security testing and emerging threats.

Required Skills & Experience

• Bachelor’s degree in Computer Science or equivalent experience.
• CISSP and OSCP certifications required.
• GIAC GPEN, GAIPT, or GWAPT preferred.
• Strong understanding of ethical hacking, vulnerability assessments, and penetration testing.
• Experience identifying, validating, and prioritizing vulnerabilities.
• Strong communication and technical reporting skills.

Desired Skills & Experience

• Experience with Nessus, AppScan, Burp Suite, Nipper, and Trustwave.
• Familiarity with Wireshark, Kali Linux, and Metasploit.
• Knowledge of OWASP, CVEs, security controls, and application exploits.
• Experience with mobile security, API testing, and manual testing techniques.
• Scripting or programming skills are a plus.
• Experience using AI to enhance security testing or assess AI-powered applications.

Key Responsibilities

• Conduct vulnerability assessments and penetration tests across applications, APIs, and platforms.
• Manage VAPT tools, processes, and testing methodologies.
• Document findings and recommend practical remediation steps.
• Collaborate with technical teams to reduce security risks.
• Stay current with emerging vulnerabilities, attack techniques, and security best practices.

The Offer

• Medical, Dental, Vision insurance
• Competitive base pay plus bonus
• Generous PTO
• 401k plus match