Lead Engineer (VAPT)

About the Role

Responsibilities

Lead Vulnerability Assessments

• Oversee and guide comprehensive vulnerability assessments on internal and external systems, networks, and applications.
• Review, refine, and approve testing methodologies and tool usage to ensure consistency and accuracy.

Direct Penetration Testing Efforts

• Plan, coordinate, and execute complex penetration tests across IT infrastructure, applications, mobile platforms, and network components.
• Lead simulations of advanced cyber-attacks to validate security controls and identify exploitable weaknesses.

Analyze, Review & Report

• Ensure thorough analysis of findings, highlighting business risk impact alongside technical details.
• Deliver executive-level briefings and detailed technical reports with prioritized, actionable recommendations.

Team Leadership & Collaboration

• Mentor junior engineers, provide training, and foster a knowledge-sharing culture within the security team.
• Collaborate with development, operations, and compliance teams to drive remediation efforts and monitor progress.

Process & Documentation Management

• Maintain and improve VAPT documentation, methodologies, and reporting templates.
• Introduce process improvements to increase efficiency, accuracy, and testing coverage.

Continuous Security Advancement

• Stay updated on emerging threats, advanced exploitation techniques, and evolving security tools.
• Evaluate and integrate new tools and frameworks into the VAPT process to enhance effectiveness.

Eligibility

Educational Background

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Strong command of network protocols, operating systems, and web/mobile technologies.
• Proficiency with leading security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms.
• Strong knowledge of IT security standards and frameworks including OWASP, NIST, and SANS Top 25, along with advanced exploitation techniques.
• Hands-on experience in manual penetration testing, complex scenario simulation, and advanced vulnerability exploitation.

Experience

• 7+ years of relevant experience in VAPT, including at least 2 years in a leadership or senior technical role.

Desired Eligibility

• Broad knowledge of security technologies across applications, databases, networks, servers, Active Directory, and endpoints.
• Experience with IoT/OT security and embedded protocol testing such as UART, I2C, SPI, JTAG, and SWD.
• Knowledge of radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR.
• Relevant certifications such as OSCP, CEH, or equivalent advanced credentials.
• Strong scripting and programming skills to develop custom exploits and automation tools.
• Active participation in security challenges such as Hack The Box and Capture The Flag (CTF) exercises.
• Familiarity with both open-source and commercial security tools such as Core Impact, Qualys, SQLmap, and OWASP ZAP.
• Willingness to travel for high-priority assessments and engagements.

Travel

Communication