VAPT Manager

Job Title:Deputy Manager / Manager – VAPT Location:Mumbai / Bangalore Experience:5+ Years Certification:CRTO (Certified Red Team Operator) – Mandatory Job Description: We are seeking an experiencedDeputy Manager / Manager – VAPT (Vulnerability Assessment and Penetration Testing)professional with a strong background in offensive security and red teaming. The ideal candidate will lead and execute VAPT engagements, identify vulnerabilities across applications, networks, and infrastructure, and provide actionable insights to strengthen overall security posture. Key Responsibilities: Lead and performVulnerability Assessment and Penetration Testingof web, mobile, network, cloud, and infrastructure environments. Plan and executeRed Teaming exercises , leveraging CRTO expertise for advanced adversarial simulations. Identify, exploit, and report security weaknesses, ensuring detailed technical and executive-level reporting. Collaborate with SOC, IR, and Blue Team units to validate and improve detection and response capabilities. Develop and maintaincustom scripts and toolsto automate repetitive testing tasks. Stay updated on emerging attack techniques, vulnerabilities, and security trends. Support client engagements, manage project timelines, and ensure deliverables meet quality and compliance standards. Mentor junior team members and contribute to building a strong offensive security capability. Required Skills & Experience: Minimum5 years of experiencein VAPT, Red Teaming, or Offensive Security. CRTO certification is mandatory(CRTO/CRTO II preferred). Strong understanding ofMITRE ATT&CK framework, TTPs , and adversarial simulation. Proficiency in tools such asBurp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, Wireshark, and custom exploit frameworks. Experience inActive Directory exploitation, privilege escalation, lateral movement, and post-exploitation techniques. Solid knowledge ofnetwork protocols, web application security, and cloud security testing (AWS/Azure/GCP) . Excellent analytical, reporting, and communication skills. Prior experience in client-facing roles or consulting environments preferred. Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or related field. Additional certifications such as OSCP, OSCE, OSEP, or similar are a plus.