Ethical Hacker

Job Summary Responsible for proactively identifying, assessing, and mitigating security risks by conducting comprehensive Vulnerability Assessments and Penetration Testing (VAPT) across organizational systems. This role bridges technical ethical hacking with structured security auditing to ensure robust defense postures, regulatory compliance, and strategic risk reporting to senior leadership and the Audit Committee. Key Responsibilities Core VAPT & Security Testing Execute end-to-end VAPT exercises across networks, applications, infrastructure, and cloud environments. Conduct scoped security testing and simulated attacks in strict alignment with the annual information security audit calendar. Data Aggregation & Analytical Auditing Collaborate with cross-functional departments to gather, aggregate, and normalize technical data, logs, and configurations required for assigned audit areas. Analyze processed technical data and system logs to eliminate false positives and derive actionable security insights. Identify and highlight critical process, procedure, and control GAPs within the evaluated audit scopes. Reporting & Executive Communication Synthesize complex VAPT and audit findings into clear, structured, and legally defensible Audit Reports . Classify and present security observations to senior management based on risk severity metrics ( High, Medium, and Low risks ), translating technical vulnerabilities into business risks. Develop high-impact presentations and technical summaries tailored to the governance requirements of the Audit Committee . Remediation Tracking & Governance Track outstanding audit findings and partner with IT and DevOps teams to provide remediation guidance. Conduct rigorous re-testing and patch verification to formally ensure the complete closure of identified security gaps. Execute ad-hoc security initiatives and emergency threat-hunting tasks as assigned by management to counter emerging exploits. Key Performance Indicators (KPIs) Audit Adherence: 100% completion of VAPT and security testing scopes against the planned audit calendar. Risk Remediation Rate: Mean time to resolution (MTTR) for critical and high-risk findings based on corporate SLAs. Verification Integrity: Zero recurrence of closed or patched vulnerabilities upon formal re-verification.