Vulnerability Assessment & Penetration Testing

Company: RiskMan
Location: On-site
Experience: 2–5 Years
Employment Type: Full-Time

About RiskMan

RiskMan is a leading Governance, Risk, Compliance (GRC), Cybersecurity, and Risk Management consulting firm helping organizations strengthen their security posture, manage risks, and achieve compliance with industry standards.

Job Summary

We are seeking a skilled and motivated VAPT Engineer to join our cybersecurity team. The ideal candidate will be responsible for conducting Vulnerability Assessments and Penetration Testing across web applications, APIs, networks, cloud environments, and mobile applications. You will identify security weaknesses, validate risks, and provide actionable remediation recommendations to clients.

Key Responsibilities

• Perform vulnerability assessments and penetration testing of:
• Web Applications
• Mobile Applications (Android/iOS)
• APIs
• Internal and External Networks
• Cloud Infrastructure
• Conduct manual and automated security testing.
• Analyze security findings and determine business impact.
• Prepare detailed technical and executive-level VAPT reports.
• Validate remediation efforts through re-testing activities.
• Support clients during security audits and compliance assessments.
• Stay updated on emerging threats, vulnerabilities, and attack techniques.

Required Skills

• Strong understanding of OWASP Top 10 and Web Application Security.
• Experience with tools such as Burp Suite, Nmap, Nessus, OpenVAS, Metasploit, Wireshark, and Kali Linux.
• Knowledge of network security concepts, operating systems, and cloud security.
• Familiarity with API security testing methodologies.
• Ability to identify, exploit, and document vulnerabilities responsibly.
• Excellent report-writing and communication skills.

Preferred Certifications

• CEH (Certified Ethical Hacker)
• eJPT / eCPPT
• OSCP
• CompTIA Security+
• CREST Certifications

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 2–5 years of hands-on VAPT experience.

What We Offer

• Opportunity to work with diverse clients and technologies.
• Exposure to GRC, Risk Management, and Cybersecurity projects.
• Professional growth and certification support.
• Collaborative and innovation-driven work environment.

Pay: From ₹45,000.00 per month

Work Location: In person