Assistant Manager (Cybersecurity)

Job Summary:

Assistant Manager – VAPT

Key Responsibilities:

• Conduct regular 

  Vulnerability Assessments

   and 

  Penetration Tests

   on web applications, mobile applications, networks, cloud infrastructure (AWS, Azure, GCP), and APIs.
• Identify, analyze, and document security flaws and vulnerabilities using manual techniques, custom scripts, and automated tools.
• Perform 

  cloud security assessments

   to identify misconfigurations, vulnerabilities, and risks associated with cloud services (AWS, Azure, GCP).
• Work closely with IT, cloud infrastructure, and development teams to validate findings, suggest remediation steps, and verify the implementation of fixes.
• Collaborate with third-party vendors for external testing and audits.
• Prepare detailed technical reports and executive summaries of findings and recommendations.
• Ensure compliance with internal policies and external regulatory requirements (e.g., ISO 27001, PCI-DSS, GDPR, SOC2).
• Stay updated with the latest vulnerabilities, exploits, and security news, particularly in the cloud security domain, through continuous learning and threat intelligence feeds.
• Assist in security incident response efforts related to vulnerabilities discovered in cloud environments and on-prem systems.

Required Skills & Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 4+ years of experience in 

  VAPT

   or a similar cybersecurity role, with hands-on experience in 

  cloud security

  .
• Proficiency in tools such as 

  Nessus, Burp Suite, Nmap, Metasploit, Wireshark, Kali Linux

  , and cloud security tools (e.g., 

  AWS Inspector, Azure Security Center, GCP Security Command Center

  ).
• Strong knowledge of 

  OWASP Top 10

  , 

  SANS 25

  , and secure coding practices.
• Hands-on experience in securing cloud environments (AWS, Azure, GCP), including network security, identity and access management (IAM), and infrastructure-as-code (IaC) security.
• Familiarity with scripting languages (Python, Bash, PowerShell) for automation and custom testing is a plus.
• Industry certifications such as 

  OSCP, CEH, GPEN, or eJPT

   and cloud security certifications like 

  AWS Certified Security Specialty

  , 

  Azure Security Engineer

   are highly desirable.
• Strong analytical, problem-solving, and communication skills.