Job Description – Senior VAPT Manager (OSCP Certified)
Position: Senior VAPT Manager
Location: Pan India
Experience: 6+ Years
Employment Type: Full-Time
Certification: OSCP (Mandatory)
About the Role
We are seeking an experienced and highly skilled Senior VAPT Consultant with a strong background in Vulnerability Assessment and Penetration Testing. The ideal candidate will have hands-on expertise in identifying, exploiting, and validating security vulnerabilities across web applications, APIs, networks, cloud environments, and enterprise infrastructure. The candidate must possess an active OSCP certification and demonstrate advanced offensive security capabilities.
Key Responsibilities
- Conduct Vulnerability Assessment and Penetration Testing (VAPT) for:
- Web Applications
- Mobile Applications
- APIs
- Network Infrastructure
- Cloud Environments (AWS, Azure, GCP)
- Thick Client Applications
- Perform manual security testing and advanced exploitation beyond automated scanning.
- Execute internal and external penetration testing engagements.
- Conduct privilege escalation, lateral movement, and post-exploitation activities.
- Perform Red Team exercises and adversary simulation activities.
- Identify, exploit, validate, and document security vulnerabilities.
- Develop proof-of-concepts (PoCs) for discovered vulnerabilities.
- Prepare detailed technical reports, executive summaries, risk assessments, and remediation recommendations.
- Collaborate with development, DevOps, and infrastructure teams to remediate security findings.
- Mentor junior security consultants and review technical deliverables.
- Stay updated with emerging threats, attack techniques, and security research.
- Participate in client discussions, workshops, and security assessments.
Required Skills
- 6+ years of hands-on experience in VAPT, Penetration Testing, Red Teaming, or Offensive Security.
- OSCP Certification (Mandatory).
- Strong understanding of:
- OWASP Top 10
- MITRE ATT&CK Framework
- PTES Methodology
- NIST Security Framework
- Expertise in:
- Web Application Security Testing
- API Security Testing
- Network Penetration Testing
- Active Directory Security Assessments
- Cloud Security Assessments
- Hands-on experience with:
- Burp Suite
- Metasploit
- Nmap
- Nessus
- Qualys
- Wireshark
- Kali Linux
- BloodHound
- Impacket
- Knowledge of exploit development and post-exploitation techniques.
- Scripting skills in Python, Bash, or PowerShell.
- Strong understanding of Windows, Linux, Active Directory, and Networking concepts.
- Excellent analytical, communication, and report-writing skills.
Preferred Qualifications
- Additional certifications such as:
- CRTP
- PNPT
- GPEN
- GWAPT
- CISSP
- CREST
- OSWE
- Experience with:
- DevSecOps
- Container Security (Docker/Kubernetes)
- Threat Modeling
- Purple Teaming
- Security Automation
- Experience leading client-facing engagements and mentoring teams.
Educational Qualification
- Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field
