Cybersecurity Analyst – VAPT

24 hours ago


Mumbai, India ShieldByte Infosec Pvt. Ltd. Full time

Location: Ghatkopar, Mumbai (Onsite) Department: Information Security / Offensive Security Experience: 2–8 Years Certifications Preferred: OSCP, CEH, eCPPT, eJPT, GWAPT, or equivalent About the Role We are seeking a highly skilled Cybersecurity Analyst (Vulnerability Assessment & Penetration Testing) specializing in both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). The ideal candidate will have hands-on experience performing end-to-end security testing across web applications, mobile apps (Android/iOS), APIs, networks, Active Directory environments, and source code. This role requires a strong understanding of offensive security, exploit development, red teaming methodologies, and secure coding practices to identify, exploit, and document vulnerabilities with actionable recommendations. Key Responsibilities - Conduct Vulnerability Assessments and Penetration Tests (VAPT) across: - Web applications, APIs, and backend services - Android and iOS mobile applications - Corporate and cloud networks - Active Directory and internal infrastructure - Perform SAST & DAST on custom applications using manual and automated tools. - Analyze source code (Java, Python, PHP, .NET, etc.) to identify logic flaws and insecure coding practices. - Execute Red Team exercises, simulate attack chains, and evaluate defense mechanisms. - Generate detailed technical reports with PoC evidence, exploit steps, risk severity, and remediation guidance. - Collaborate with development and DevSecOps teams to verify fixes and retests. - Maintain up-to-date knowledge of the latest vulnerabilities, exploits, and security tools. - Support compliance assessments and cybersecurity trends. Required Skills and Expertise - Strong knowledge of OWASP Top 10, SANS CWE 25, and MITRE ATT&CK frameworks. - Hands-on experience with tools like Burp Suite, ZAP, Metasploit, Nmap, Nessus, Nikto, MobSF, Frida, Drozer, Postman, SQLMap, etc. - Deep understanding of authentication flaws, insecure direct object references, API abuse, and privilege escalation. - Practical experience with Active Directory attacks (Kerberoasting, Pass-the-Hash, LLMNR poisoning, etc.) - Proficiency in scripting languages (Python, Bash, PowerShell) and code review. - Excellent analytical, reporting, and communication skills. Certifications (Preferred but not Mandatory) - Offensive Security Certified Professional (OSCP) - Certified Ethical Hacker (CEH) - eLearnSecurity Certified Professional Penetration Tester (eCPPT) - GIAC Penetration Tester (GPEN) - eWPT / eWPTX / eJPT Educational Qualification - Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field. - Equivalent hands-on experience may be considered as a substitute for formal education. Why Join Us - Opportunity to work on real-world red teaming engagements and advanced VAPT projects. - Exposure to global clients in the BFSI, IT, and healthcare domains. - Continuous learning through internal labs, CTFs, and tool research. - Competitive pay, certification sponsorship, and a growth-oriented culture.



  • Mumbai, Maharashtra, India ShieldByte Infosec Pvt. Ltd. Full time ₹ 8,00,000 - ₹ 24,00,000 per year

    Location:Ghatkopar, Mumbai (Onsite)Department:Information Security / Offensive SecurityExperience:2–8 YearsCertifications Preferred:OSCP, CEH, eCPPT, eJPT, GWAPT, or equivalentAbout the RoleWe are seeking a highly skilledCybersecurity Analyst (Vulnerability Assessment & Penetration Testing)specializing in bothStatic Application Security Testing...


  • Mumbai, Maharashtra, India Anzen Technologies Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    ANZEN Technologies Private Limited. stands as an unparalleled powerhouse, empowering organizations across industries with our visionary services, cutting-edge solutions, and ground-breaking services in the realm of Cyber Security, IT Governance, Risk Management, and Compliance. As your trusted partner, we offer a comprehensive suite of End-to-End security...


  • mumbai, India ShieldByte Infosec Pvt. Ltd. Full time

    Location: Ghatkopar, Mumbai (Onsite)Department: Information Security / Offensive SecurityExperience: 2–8 YearsCertifications Preferred: OSCP, CEH, eCPPT, eJPT, GWAPT, or equivalentAbout the RoleWe are seeking a highly skilled Cybersecurity Analyst (Vulnerability Assessment & Penetration Testing) specializing in both Static Application Security Testing...


  • Mumbai, India ShieldByte Infosec Pvt. Ltd. Full time

    Location: Ghatkopar, Mumbai (Onsite)Department: Information Security / Offensive SecurityExperience: 2–8 YearsCertifications Preferred: OSCP, CEH, eCPPT, eJPT, GWAPT, or equivalentAbout the RoleWe are seeking a highly skilled Cybersecurity Analyst (Vulnerability Assessment & Penetration Testing) specializing in both Static Application Security Testing...

  • VAPT Intern

    7 days ago


    Mumbai, Maharashtra, India CyRAACS™ Full time ₹ 2,40,000 - ₹ 7,20,000 per year

    We're Hiring: VAPT Interns – Dombivli, Mumbai (On-site)Are you passionate about cybersecurity and eager to get hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT)?We're on the lookout for sharp, curious, and drivenVAPT Internsto join our cybersecurity team inMumbai. This is an exciting opportunity to work alongside experienced...

  • Senior Consultant

    4 weeks ago


    Mumbai, India Cubical Operations LLP Full time

    Job Title: Senior Consultant – VAPT Location: Mumbai, IndiaExperience: Minimum 3 YearsJob Type: Full-TimeDepartment: Cybersecurity / Information SecurityJob Summary:We are looking for a highly skilled and motivated Senior Consultant – VAPT to join our cybersecurity team in Mumbai. The ideal candidate will have a solid background in ...

  • Senior Consultant

    4 weeks ago


    Mumbai, India Cubical Operations LLP Full time

    Job Title: Senior Consultant – VAPT Location: Mumbai, India Experience: Minimum 3 Years Job Type: Full-Time Department: Cybersecurity / Information Security Job Summary: We are looking for a highly skilled and motivated Senior Consultant – VAPT to join our cybersecurity team in Mumbai. The ideal candidate will have a solid background in Vulnerability...

  • Senior Consultant

    3 weeks ago


    Mumbai, India Cubical Operations LLP Full time

    Job Title: Senior Consultant - VAPT Location: Mumbai, India Experience: Minimum 3 Years Job Type: Full-Time Department: Cybersecurity / Information Security Job Summary: We are looking for a highly skilled and motivated Senior Consultant - VAPT to join our cybersecurity team in Mumbai. The ideal candidate will have a solid background in Vulnerability...


  • mumbai, India Cubical Operations LLP Full time

    Job Title: VAPT Manager – OSCP Certified Location: India (Travel to Middle East as Required) Experience: 5+ Years Certification: OSCP (Mandatory) Preference: Early JoinersJob Overview We are seeking an experienced and highly skilled VAPT Manager to lead vulnerability assessment and penetration testing engagements for clients across the Middle East. The...


  • Mumbai, India Cubical Operations LLP Full time

    Job Title: VAPT Manager – OSCP Certified Location: India (Travel to Middle East as Required) Experience: 5+ Years Certification: OSCP (Mandatory) Preference: Early JoinersJob Overview We are seeking an experienced and highly skilled VAPT Manager to lead vulnerability assessment and penetration testing engagements for clients across the Middle East. The...