JOB TITLE: Senior / Lead Engineer – Vulnerability Assessment and Penetration Testing (VAPT)
JOB CODE:
LOCATION: Bangalore
About Us
Versa Networks, Inc. is a leading vendor of next-generation Software Defined solutions and architectures, including SD-WAN, SD-LAN, SASE (Secure Access Service Edge), and NGFW. Versa is providing an end-to-end solution that both simplifies and secures every network edge, be it on LAN, WAN, or Cloud network.
The goal of Versa Networks is to provide unprecedented business advantages through a software-based approach that allows for unmatched agility, cost savings and scaling. We have created a feature-rich, scalable yet simple to use software platform to implement many different enterprise and service provider use cases, including:
· Full software-defined branch for enterprise customers.
· Secure SD-WAN and SD-LAN for enterprises with layered security.
· Next-generation managed services for service providers.
Job Summary
We are seeking a highly skilled and motivated Vulnerability Assessment and Penetration Testing (VAPT) Engineer to join our Product Development Group.
The ideal candidate will have deep expertise in identifying, analyzing, and remediating vulnerabilities in:
· Web applications
· REST APIs
· Spring Boot microservices
· Tomcat-based deployments
· Ubuntu OS environments
· Docker-based container environments
You will proactively identify security gaps across application and infrastructure layers, simulate real-world attacks, and work closely with developers and DevOps engineers to ensure a secure SDLC.
Key Responsibilities
Vulnerability Assessment
· Perform automated and manual scans across applications, containers, and infrastructure.
· Identify misconfigurations and risks in Spring Boot, Tomcat, Ubuntu, and Docker environments.
· Analyze vulnerability data and prioritize remediation based on impact.
· Build internal tools and frameworks to streamline security assessments.
Penetration Testing
· Conduct internal and external penetration testing on applications, APIs, and systems.
· Simulate real-world attack scenarios including container-specific risks.
· Exploit vulnerabilities in controlled environments to demonstrate impact.
· Evaluate authentication, access control, injection flaws, and data exposure paths.
Security Auditing
· Review code, architecture, and configurations from a security perspective.
· Audit Dockerfiles, base images, system services, and deployment pipelines.
· Ensure compliance with ISO 27001, NIST, OWASP, CIS Docker Benchmarks, and other standards.
Reporting & Remediation
· Document findings in detailed reports with risk ratings and mitigation guidance.
· Work with developers to verify fixes and close issues.
· Track vulnerabilities through lifecycle from discovery to resolution.
Secure SDLC Integration
· Participate in design reviews and feature testing with an eye on security.
· Integrate security checks into CI/CD pipelines and container builds.
· Write and maintain threat models, test plans, and custom automation scripts.
Research & Development
· Stay current with the latest vulnerabilities and container security trends.
· Develop in-house utilities to automate and scale VAPT operations.
· Promote DevSecOps best practices within the engineering organization.
Collaboration
· Work with product, QA, DevOps, and IT teams to ensure defense-in-depth.
· Drive secure coding practices and hardening measures across teams.
· Contribute to policy definitions and internal security awareness.
Experience:
6 to 9 years
Education & Certifications
· Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
· Preferred certifications: OSCP, CEH, GPEN, CISSP, ISO 27001 LA/LI
Essential Skills
· Penetration testing of Spring Boot, Tomcat, REST APIs, Ubuntu, and Docker environments.
· Strong experience with tools: Burp Suite Pro, Nessus, Nmap, Metasploit, Wireshark, Trivy, Dockle, etc.
· Understanding of OWASP Top 10, container risks, and network security protocols.
· Proficiency in scripting (Python, Bash, or PowerShell).
· Familiarity with threat modeling, attack simulation, and report generation.
Nice to Have
· Experience with Kubernetes, container orchestration, and cloud-native security.
· Exposure to static/dynamic analysis tools (SAST/DAST).
· DevSecOps experience with GitHub Actions, Jenkins, GitLab CI, etc.
· Background in VPNs, firewalls, SD-WAN, and enterprise network appliances.
Why Join Us
· Become the go-to application and infrastructure security expert within the dev team.
· Work on high-impact products using cutting-edge cloud and container technologies.
· Influence design, architecture, and delivery with a security-first approach.
Enjoy a collaborative, ownership-driven engineering culture focused on excellence
Check us out!
Look forward to talk you.
Our Benefits
Versa Networks is a rapidly growing organization and is built by people with vast experience in networking industry. We are a pragmatic team with a healthy work-life balance. We offer competitive compensation packages and quality of life benefit to everyone in an inspiring environment with skilled and passionate coworkers. Our exciting company culture offers a great place to work.
