Join our Cybersecurity team as a Deputy Manager specializing in Vulnerability Assessment and Penetration Testing (VAPT). This role is crucial for safeguarding organizational assets by identifying and mitigating security risks across applications and infrastructure. You will be at the forefront of evolving cyber threats, contributing to a secure digital landscape.

Our team is dedicated to helping organizations prevent cyberattacks and protect valuable assets. We focus on building robust security postures, managing cyber risk effectively, and enabling organizations to explore new opportunities with confidence. We embed security principles into strategy development for better information and technology risk management.

Conduct comprehensive Vulnerability Assessments and Penetration Tests (VAPT) for web applications, mobile apps, APIs, and cloud environments. Ensure testing aligns with industry standards like OWASP Top 10, OWASP API Security Top 10, SANS Top 25, and CWE.

Focus on assessing Generative AI applications, LLM-based solutions, and AI-powered chatbots. This includes evaluating AI guardrails, model access controls, and integrations with enterprise systems. You will develop scenario-based test cases, validate exploits, and recommend risk-based remediation strategies.

Perform configuration reviews for firewalls, network devices, Windows, Linux, databases, and cloud platforms (AWS & Azure). Engage in Red Teaming, Thick Client assessments, and Source Code Reviews. Hands-on experience with DevSecOps practices is essential. You will also play a role in security architecture and product security.

We are seeking an experienced Application & API VAPT Analyst with 3-5 years of hands-on experience. A strong background in Web Application Security Testing, Infrastructure VAPT, API testing, and Mobile Testing (iOS & Android) is required.

Candidates must demonstrate a solid understanding of AI/LLM-specific vulnerabilities and security concepts, including prompt injection and data leakage. Experience in evaluating AI application security throughout the development lifecycle and preparing detailed assessment reports is vital.

Familiarity with vulnerability management tools such as Burp, Kali Linux, Nessus, and Nmap is expected. A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is necessary. This role requires working from the office in Bengaluru.