VAPT Analyst

Job Title: VAPT Analyst

Location: Bengaluru

Department: Cybersecurity – Offensive Security

Experience: 1-2 years

Employment Type: Full-time

About Us:

AuthenticOne is a CERT-In empanelled and CREST Accredited Cybersecurity solutions and 

services company with expertise in consulting, advisory, and risk management. 

AuthenticOne specializes in Comprehensive Compliance Management, Vulnerability 

Assessment, Penetration Testing, and Managed Security Services. Our expert team 

ensures that clients' businesses meet all regulatory requirements, identify and mitigate 

potential vulnerabilities, and maintain robust, continuous protection against evolving 

cyber threats.

Position Summary:

The VAPT Analyst will be responsible for conducting Vulnerability Assessment and 

Penetration Testing (VAPT) engagements across web applications, mobile applications, 

APIs, networks, cloud environments, and enterprise infrastructure. The role requires a 

strong understanding of offensive security methodologies, vulnerability identification, 

exploitation techniques, and security best practices. The ideal candidate is passionate 

about ethical hacking, cybersecurity research, and helping organizations strengthen their 

security posture.

Key Responsibilities:

• Perform Vulnerability Assessment and Penetration Testing (VAPT) activities for web applications, mobile applications, APIs, networks, wireless infrastructure, and cloud environments.
• Identify, validate, and exploit security vulnerabilities using manual and automated testing methodologies.
• Conduct authenticated and unauthenticated security assessments following 
• industry-standard frameworks and testing methodologies.
• Analyze security findings, assess business impact, and provide remediation recommendations.
• Prepare comprehensive technical and executive-level assessment reports.
• Support Red Team, Purple Team, and adversary simulation exercises as required.
• Stay updated on emerging threats, attack techniques, vulnerabilities, and industry best practices.
• Contribute to internal research, tool development, automation initiatives, and knowledge-sharing activities.

Qualifications:

• 1–2 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Application Security, or Offensive Security.
• Knowledge of network security concepts, common attack vectors, exploitation techniques and the OWASP Top 10
• Hands-on experience with security testing tools such as Burp Suite, Nmap, Nessus, OpenVAS, Nikto, Metasploit, SQLMap, Wireshark, and similar tools.
• Understanding of authentication mechanisms, session management, access control vulnerabilities, and API security.
• Familiarity with Linux and Windows operating systems from a security testing 
• perspective.
• Experience with scripting or automation using Python, Bash, PowerShell, or similar languages is an added advantage.
• Knowledge of cloud security fundamentals across AWS, Azure, or Google Cloud 
• Platform.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent report writing and communication skills.
• Ability to explain technical vulnerabilities and remediation recommendations to both technical and non-technical stakeholders.

Educational Qualifications:

• Bachelor's degree in computer science, Information Security, Information Technology, Cybersecurity, or a related field (or equivalent practical experience).
• One or more industry certifications such as eJPT, PNPT, CEH, Security+, eWPT, 
• OSCP etc.

Why Join Us

• Be part of a young, passionate cybersecurity company making a real impact.
• Work on diverse cybersecurity engagements across industries and technologies.
• Gain exposure to advanced security testing methodologies, compliance frameworks, and real-world attack scenarios.
• Collaborate with experienced cybersecurity consultants and security researchers.
• Growth-oriented culture built on Trust, Transparency, and Teamwork.

To Apply:

• Directly apply through LinkedIn EasyApply Options.