Senior VAPT Engineer

About the role

The Senior VAPT Engineer will lead and execute vulnerability assessments and penetration testing across a wide range of technology environments, including web and mobile applications, APIs, networks, and cloud infrastructure. This senior position involves both automated and manual testing, risk validation, and delivery of detailed remediation guidance.

Key responsibilities

• Plan, scope, and conduct VAPT engagements for web, mobile, API, network, and cloud environments.
• Perform manual and automated testing to identify, validate, and exploit security vulnerabilities.
• Produce comprehensive technical reports, executive summaries, risk ratings, and proof‑of‑concept evidence.
• Present findings and mitigation strategies to clients and internal stakeholders.
• Collaborate with development, infrastructure, and security teams to remediate findings and retest fixes.
• Develop and improve testing methodologies, checklists, scripts, and automation tools.
• Stay current with emerging threats, attack techniques, and security research.
• Mentor junior VAPT engineers and support pre‑sales technical discussions.

Required profile

• Strong knowledge of penetration testing methodologies and vulnerability assessment processes.
• In‑depth understanding of common security vulnerabilities, exploitation techniques, and remediation strategies.
• Experience testing against standards such as OWASP Top 10 and OWASP API Security Top 10.
• Ability to communicate technical findings clearly to both technical and non‑technical audiences.

Required skills

• Penetration testing
• Vulnerability assessment
• OWASP Top 10
• API security testing