Vulnerability Assessment & Penetration Testing (VAPT) Engineer

Job Overview: We are looking for a VAPT Engineer with 02 years of hands-on experience to execute vulnerability assessments and conduct penetration tests across diverse platforms . web, mobile, API, network, and cloud, using both automated tools and manual techniques. Your goal: proactively identify security weaknesses, demonstrate their impact via PoCs, and collaborate with stakeholders to ensure effective remediation. Key Responsibilities: Conduct vulnerability assessments and penetration tests on web applications, mobile apps, APIs, network infrastructure, and cloud environments using tools such as Burp Suite, Nessus/OpenVAS, Metasploit, Nmap, and optionally Qualys. Identify, analyze, and prioritize security weaknesses, misconfigurations, and coding issues, especially OWASP Top10 and SANS Top25 common findings. Develop and execute proof ofconcepts and exploit chains, demonstrating vulnerability impact. Produce detailed reports with risk assessment, remediation recommendations, and executive summaries for different audiences. Collaborate with development, operations, and security teams to ensure vulnerabilities are mitigated or remediated. Keep updated on the latest CVEs, internal threat intelligence, and testing methodologies. Support and contribute to security strategy, policy development, and secure architecture reviews where applicable. Key Requirements: 2years of hands-on experience in vulnerability assessment and penetration testing roles Proficiency with VAPT tools: Burp Suite, Nmap, Nessus/OpenVAS, Metasploit/Kali Linux Understanding of OWASP Top10, SANS Top25, and attacker behaviour (e.g. MITRE ATT&CK) Basic scripting ability (Python, Bash, PowerShell) for customized testing or automation Knowledge of network/protocol fundamentals (TCP/IP, DNS, HTTP/S). Strong written and verbal communication skills to convey findings to technical and non-technical audiences. ABOUT Innspark is a deep-tech, product-based OEM specializing in cybersecurity products, AI, cloud solutions, and select hardware offerings such as drones, VTS, and telemedicine systems, with a diverse and evolving portfolio. To learn more, please visit our website: https://innspark.in. Job Overview: We are looking for a VAPT Engineer with 02 years of hands-on experience to execute vulnerability assessments and conduct penetration tests across diverse platforms . web, mobile, API, network, and cloud, using both automated tools and manual techniques. Your goal: proactively identify security weaknesses, demonstrate their impact via PoCs, and collaborate with stakeholders to ensure effective remediation. Key Responsibilities: Conduct vulnerability assessments and penetration tests on web applications, mobile apps, APIs, network infrastructure, and cloud environments using tools such as Burp Suite, Nessus/OpenVAS, Metasploit, Nmap, and optionally Qualys. Identify, analyze, and prioritize security weaknesses, misconfigurations, and coding issues, especially OWASP Top10 and SANS Top25 common findings. Develop and execute proof ofconcepts and exploit chains, demonstrating vulnerability impact. Produce detailed reports with risk assessment, remediation recommendations, and executive summaries for different audiences. Collaborate with development, operations, and security teams to ensure vulnerabilities are mitigated or remediated. Keep updated on the latest CVEs, internal threat intelligence, and testing methodologies. Support and contribute to security strategy, policy development, and secure architecture reviews where applicable. Key Requirements: 2years of hands-on experience in vulnerability assessment and penetration testing roles Proficiency with VAPT tools: Burp Suite, Nmap, Nessus/OpenVAS, Metasploit/Kali Linux Understanding of OWASP Top10, SANS Top25, and attacker behaviour (e.g. MITRE ATT&CK) Basic scripting ability (Python, Bash, PowerShell) for customized testing or automation Knowledge of network/protocol fundamentals (TCP/IP, DNS, HTTP/S). Strong written and verbal communication skills to convey findings to technical and non-technical audiences. ABOUT Innspark is a deep-tech, product-based OEM specializing in cybersecurity products, AI, cloud solutions, and select hardware offerings such as drones, VTS, and telemedicine systems, with a diverse and evolving portfolio. To learn more, please visit our website: https://innspark.in.