Security Lead - VAPT Practice

We are seeking a highly skilled and motivated Senior VAPT Consultant to join our growing cybersecurity team. This foundational role is ideal for someone who is passionate about offensive security and eager to contribute to a lean and agile environment. You’ll play a critical part in leading and executing penetration tests, shaping internal methodologies, and mentoring junior talent.

Key Responsibilities

• Conduct penetration testing on Web Applications, Networks, Infrastructure, and Cloud environments.
• Perform Vulnerability Assessments (VA) using tools like Nessus, OpenVAS, etc.
• Utilize industry-standard tools such as Burp Suite, Nmap, Metasploit, etc.
• Review and write detailed technical reports, outlining findings, risks (CVSS-based or similar), and actionable remediation guidance.
• Collaborate with clients to explain findings, articulate risks, and suggest mitigation strategies.
• Lead small-scale security projects or client engagements, ensuring quality and timely delivery.
• Mentor junior team members and enforce quality standards.
• Contribute to the development of tools, methodologies, and frameworks within the security practice.

Requirements

• 5–8+ years of professional experience in Information Security, with a strong focus on Vulnerability Assessment and Penetration Testing (VAPT).
• In-depth, hands-on experience with:
• Web App, Network, and Infra Pen Testing
• Cloud Security Testing (Azure/AWS)
• Familiarity with risk rating methodologies such as CVSS.
• Strong communication skills with the ability to interface with clients and present findings clearly.
• Proven ability to work independently in a fast-paced, startup-like environment.

Preferred Certifications (Any of the following):

• OSCP / OSCE / CRTP / eCPPT
• CEH (with demonstrable hands-on experience)
• AZ-500 or AWS Security Specialty (for cloud VAPT experience)

Growth Opportunities

• Foundational leadership role in a growing cybersecurity practice
• Clear path to grow into Practice Head or Principal Consultant
• Opportunity to shape tools, frameworks, and methodologies from the ground up

Nice to Have

• Experience contributing to open-source or internal security tooling
• Familiarity with scripting or automation in Python, Bash, or PowerShell