PEN Testing

SUMMARY

We are seeking a skilled and motivated Vulnerability Assessment and Penetration Testing (VAPT) Engineer to conduct comprehensive security assessments. The ideal candidate will have extensive experience in penetration testing, vulnerability analysis, and security auditing to help identify weaknesses and recommend improvements.

Key Responsibilities:

• Vulnerability Assessment:

§ Perform vulnerability scans and assessments and build infrastructure to identify potential security gaps.

§ Analyze findings from automated tools and manual assessments, categorize risks, and prioritize remediation efforts.

• Penetration Testing:

§ Conduct internal and external penetration testing.

§ Simulate real-world attacks to identify vulnerabilities.

§ Exploit identified vulnerabilities to assess risk impact and potential exposure of sensitive data.

• Security Auditing:

§ Perform in-depth security reviews of enterprise network products, focusing on configuration, encryption, access controls, and protocol security.

§ Ensure compliance with industry standards, such as ISO 27001, NIST, PCI-DSS, and others applicable to the enterprise environment.

• Reporting & Remediation:

§ Provide detailed technical reports of identified vulnerabilities with clear steps for mitigation.

§ Collaborate with engineering and IT teams to recommend and implement remediation strategies.

§ Track the lifecycle of identified vulnerabilities from discovery to resolution, ensuring timely fixes.

• Research & Development:

§ Stay current with the latest security threats, vulnerabilities, and mitigation strategies.

§ Develop and refine in-house tools and scripts to improve the VAPT process and efficiency.

§ Contribute to the development of security policies and best practices within the organization.

• Collaboration:

§ Work closely with product development teams to perform security reviews during the product lifecycle.

§ Collaborate with IT and network security teams to ensure best security practices are embedded in network architecture.

EDUCATION QUALIFICATION

• Bachelor’s or master`s degree in Computer Science, Information Security, or related field.

• Relevant certifications such as CEH, OSCP, CISSP, or GPEN preferred.

EXPERIENCE

• 3+ years of experience in penetration testing, vulnerability assessment, or network security.

• Proven experience with network products, including SDWAN, firewalls, routers, VPNs, and security appliances.

ROLES AND RESPONSIBILITIES

• Work with engineering teams to test new features: do pentest and vulnerability assessments for new features

• Write/maintain Test cases and Test Plans

• Help reproduce the issues found during engineering test phase and field tests

• Help improve product quality and performance through regular technical feedback

ESSENTIAL SKILLS

• Proficiency in penetration testing tools such as Metasploit, Burp Suite, Nessus, Nmap, and Wireshark.

• Strong knowledge of networking protocols (TCP/IP, DNS, HTTP, SSH, VPNs, etc.).

• Experience with scripting languages (Python, Bash, or PowerShell) to automate security testing and reporting tasks.

• Familiarity with enterprise security standards and frameworks (ISO 27001, NIST, etc.).

• Understanding of secure coding principles and secure network design.