VAPT Manager

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, mobile apps, networks, Active Directory, APIs, and enterprise systems
• Perform manual and automated penetration testing with strong hands-on depth in web, network, and AD security testing
• Execute Red Teaming / adversary simulation activities, including privilege escalation and lateral movement
• Perform cloud security assessments across AWS, Azure, and GCP environments
• Review and assess security configurations of network devices, servers, databases, and cloud services
• Evaluate CI/CD pipelines and DevSecOps practices to identify security gaps in build and deployment processes
• Analyze findings, assign risk ratings, and prepare clear VAPT reports with impact analysis and actionable remediation guidance
• Collaborate with development, DevOps, IT, and client stakeholders to prioritize and support vulnerability remediation
• Continuously track emerging threats and attack techniques and enhance testing methodologies accordingly

• Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) across web applications, mobile apps, networks, Active Directory, APIs, and enterprise systems
• Perform manual and automated penetration testing with strong hands-on depth in web, network, and AD security testing
• Execute Red Teaming / adversary simulation activities, including privilege escalation and lateral movement
• Perform cloud security assessments across AWS, Azure, and GCP environments
• Review and assess security configurations of network devices, servers, databases, and cloud services
• Evaluate CI/CD pipelines and DevSecOps practices to identify security gaps in build and deployment processes
• Analyze findings, assign risk ratings, and prepare clear VAPT reports with impact analysis and actionable remediation guidance
• Collaborate with development, DevOps, IT, and client stakeholders to prioritize and support vulnerability remediation
• Continuously track emerging threats and attack techniques and enhance testing methodologies accordingly
• Certifications (At Least One Mandatory): CRTO – Certified Red Team Operator
• OSCP – Offensive Security Certified Professional
• CRTP – Certified Red Team Professional
• GPEN – GIAC Penetration Tester
• CEH – Certified Ethical Hacker
• CompTIA PenTest+
• CISSP / CISM (Good to have for senior / leadership roles)
• Work Experience: 8 to 12 years

CISSP / CISM (Good to have for senior / leadership roles)