[Hiring] VAPT Analyst @Intersources

Role Description

We are looking for a skilled VAPT Analyst with 2+ years of hands-on experience in Vulnerability Assessment and Penetration Testing. The candidate will be responsible for identifying, validating, documenting, and reporting security vulnerabilities across web applications, APIs, networks, and infrastructure.

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, networks, servers, and infrastructure.
• Identify and validate Critical, High, Medium, and Low security vulnerabilities.
• Conduct manual and automated security testing and eliminate false positives.
• Perform testing based on OWASP Top 10, OWASP API Security Top 10, and industry best practices.
• Use tools such as Burp Suite, Nessus/Qualys, Nmap, Nikto, OpenVAS, Metasploit, and other security testing tools.
• Analyze vulnerability scan results and perform manual verification.
• Prepare detailed VAPT reports with vulnerability description, business impact, evidence, severity, and remediation recommendations.
• Work closely with development and infrastructure teams to validate remediation and perform retesting/rescans.
• Track vulnerabilities through closure and maintain accurate remediation status.
• Participate in security discussions with internal teams and clients and provide technical clarification on findings.
• Support vulnerability management activities, including MTTR tracking, aging analysis, and closure reporting.

Qualifications

• 2+ years of hands-on experience in VAPT / Cybersecurity.
• Strong understanding of OWASP Top 10 and common web application vulnerabilities.
• Experience in Web Application, API, Network, and Infrastructure Security Testing.
• Good knowledge of vulnerabilities such as:
• SQL Injection
• Cross-Site Scripting (XSS)
• CSRF
• SSRF
• IDOR/BOLA
• Authentication & Authorization issues
• Command Injection
• File Upload vulnerabilities
• Security Misconfiguration
• Clickjacking
• Hands-on experience with Burp Suite is required.
• Knowledge of Nmap, Nessus/Qualys, Metasploit, Nikto or similar tools.
• Basic understanding of Linux, Windows, TCP/IP, HTTP/HTTPS, DNS, and networking concepts.
• Ability to distinguish true positives from false positives.
• Strong analytical, troubleshooting, documentation, and communication skills.

Preferred Certifications

• CEH
• eJPT / eCPPT
• OSCP
• or equivalent certification