Vulnerability Assessment and Penetration Testing (VAPT) Analyst

The VAPT Analyst is responsible for the continuous identification, assessment, and remediation of security threats and vulnerabilities affecting the organization’s information systems, networks, applications, and cloud environments.

• The analyst providing support to SOC team in managing vulnerabilities in accordance with organizational security policies, industry standards, and regulatory requirements.

• Maintain a proactive approach in identifying and reviewing vulnerabilities before exploitation.

• Ensure the integrity, confidentiality, and availability of organizational systems.

• Strengthening the organization’s security posture through continuous monitoring, coordination, and improvement.

• Perform vulnerability assessments and security scans on applications, systems, networks, and cloud environments.

• Support vulnerability management activities, including validation, tracking, and remediation monitoring.

• Operate and maintain VAPT and security testing tools under the guidance of Security Operations Manager and Security Engineer.

• Conduct basic security configuration reviews against organizational standards and CIS Benchmarks using the allowed VAPT tool.

• Perform initial validation of identified vulnerabilities under the guidance of the Security Operations Engineer and Security Operations Manager, and categorize identified vulnerabilities based on severity and risk ratings.

• Assist in internal and third-party security assessments and penetration testing activities.

• Monitor emerging vulnerabilities, Common Vulnerabilities and Exposures (CVEs), and security advisories and assess potential impact.

• Coordinate with internal information security team to address identified security findings.

• Prepare initial assessment reports to be reviewed by Security Operations Manager.

• Assist Security Operations (SOC) in monitoring remediation of vulnerabilities

• Coordinate with internal teams to address identified security findings.

• Continuously develop cybersecurity best practice and vulnerability management knowledge.

Qualification

• Completed academic education in the relevant direction

• Minimum at least 1 - 2 years of experience in Information Technology (IT) or Information Security (IS)

• Basic understanding of Cybersecurity Fundamentals, including Confidentiality, Integrity, and Availability (CIA).

• Basic knowledge of Vulnerability Assessment and Penetration Testing (VAPT) and Vulnerability Management.

• Understanding of CVEs, CVSS scoring, remediation, and patch management.

• Familiarity with Windows, Linux, and networking fundamentals (TCP/IP, DNS, DHCP, HTTP/HTTPS, SSH).

• Basic experience with vulnerability scanning and security assessment tools is an advantage.

• Strong analytical, documentation, reporting, and communication skills.

• Able to support and respond promptly to any cybersecurity event and detection