Senior VAPT Engineer

About the role

The Senior VAPT Engineer will lead and execute comprehensive vulnerability assessment and penetration testing projects for a variety of technology environments, including web and mobile applications, APIs, networks, and cloud infrastructure. The role involves both automated and manual testing, risk validation, and delivery of actionable remediation guidance.

Key responsibilities

• Plan, scope, and conduct VAPT engagements across web, mobile, API, network, and cloud platforms.
• Perform manual and automated testing to identify, validate, and exploit security flaws.
• Produce detailed technical reports, executive summaries, risk ratings, and proof‑of‑concept evidence.
• Present findings and mitigation strategies to clients and internal stakeholders.
• Collaborate with development, infrastructure, and security teams to support remediation and retesting.
• Develop and improve testing methodologies, scripts, and automation tools.
• Stay up‑to‑date with emerging threats, vulnerabilities, and security research.
• Mentor junior VAPT engineers and contribute to knowledge sharing.
• Assist in pre‑sales technical discussions and client consultations as needed.

Required profile

• Strong knowledge of penetration testing methodologies and vulnerability assessment processes.
• In‑depth understanding of common security vulnerabilities, exploitation techniques, and remediation strategies.
• Experience testing against standards such as OWASP Top 10 and OWASP API Security Top 10.
• Ability to communicate technical findings clearly to both technical and non‑technical audiences.
• Proven ability to work independently and lead complex security engagements.

Required skills

• Penetration testing
• Vulnerability assessment
• OWASP Top 10
• OWASP API Security Top 10
• Web application security
• Mobile application security
• API security
• Network security
• Cloud security