Weekday AI

Proactive software engineer recruitment via referrals

Vulnerability Assessment and Penetration Testing Engineer

Offensive Security & TestingPosted on Nov 12

Full-timeHyderabad, Telangana, India₹3.6M - ₹7MIn-person

About the Job

Requirements

At least 9 years of hands-on experience in vulnerability assessment, penetration testing, and red teaming across diverse technology stacks.
Deep expertise in Automated Security Reconnaissance tools such as Burp Suite, Zap, and custom scripting.
Proficiency in exploiting web application vulnerabilities, including SQL injection, cross-site scripting, cross-site request forgery, OTN, and server-side request forgery, as well as infrastructure weaknesses such as misconfigurations and privilege escalation.
Advanced knowledge of OWASP ASVS, NIST SP 800-53, and CIS Controls, with the ability to map findings to industry standards.
Proficiency in Python, Bash, PowerShell, and scripting for automation and exploitation.
Experience in Red Team simulations, including threat modeling, attack choreography, and adversary emulation frameworks such as MITRE ATT&CK.
Experience integrating security testing into CI/CD pipelines and SecOps workflows.

Responsibilities

Conduct full-stack vulnerability assessments and penetration tests on web applications, microservices, APIs, and network infrastructure.
Implement and customize Automated Security Reconnaissance tools to accelerate threat surface analysis and discovery.
Perform advanced Red Team exercises that simulate adversary tactics, techniques, and procedures to evaluate detection and response capabilities.
Analyze vulnerability scan results and prioritize findings based on risk and business impact.
Develop exploitation proof-of-concepts and provide actionable remediation guidance to stakeholders.
Collaborate with DevSecOps teams to integrate security testing into CI/CD pipelines and development workflows.
Mentor junior security analysts and conduct training on vulnerability tools, exploitation techniques, and secure coding practices.
Maintain knowledge of emerging threats, exploits, and security frameworks, and update testing methodologies accordingly.
Generate comprehensive reports and executive summaries that translate technical findings into clear, business-relevant insights.
Participate in incident response drills, providing expertise on breach containment, forensic analysis, and post-incident remediation.
Design, execute, and report on vulnerability assessment and penetration testing engagements across cloud, web, mobile, and network environments.
Use Automated Security Reconnaissance frameworks to identify attack vectors and validate zero-day exploits, ensuring findings are actionable and aligned with industry best practices.
Collaborate with development and security teams to remediate identified risks, maintain threat intelligence feeds, and improve the organization's security posture.
Advise on continuous improvement of security controls and provide insights that influence product design, architecture resilience, and cyber risk strategy.

Desired Qualifications

Participation in security communities, capture-the-flag events, and vulnerability research.

VAPT engineer

Weekday AI · Hyderabad, India · Full-time · Posted 2026-11-12

Salary: INR 3,600,000–7,000,000

Workplace: on_site

Department: Weekday's Client via platform

Description

𝗧𝗵𝗶𝘀 𝗿𝗼𝗹𝗲 𝗶𝘀 𝗳𝗼𝗿 𝗼𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗪𝗲𝗲𝗸𝗱𝗮𝘆'𝘀 𝗰𝗹𝗶𝗲𝗻𝘁𝘀

𝗦𝗮𝗹𝗮𝗿𝘆 𝗿𝗮𝗻𝗴𝗲: 𝗥𝘀 𝟯𝟲𝟬𝟬𝟬𝟬𝟬 - 𝗥𝘀 𝟳𝟬𝟬𝟬𝟬𝟬𝟬 (𝗶𝗲 𝗜𝗡𝗥 𝟯𝟲-𝟳𝟬 𝗟𝗣𝗔)

Experience: 9+ yrs

Location: Hyderabad

As a VAPT Engineer, you will be responsible for designing, executing, and reporting on comprehensive vulnerability assessment and penetration testing engagements across cloud, web, mobile, and network environments. Leveraging your expertise in Automated Security Reconnaissance (ASR) frameworks, you will uncover hidden attack vectors and validate zero‑day exploits, ensuring that all findings are actionable and align with industry best practices. Your role will also involve collaborating with development and security teams to remediate identified risks, maintain threat intelligence feeds, and contribute to the evolution of the organization’s security posture. You will serve as a trusted advisor in the continuous improvement of security controls, delivering insights that influence product design, architecture resilience, and overall cyber risk strategy.

Requirements

𝗞𝗲𝘆 𝗥𝗲𝘀𝗽𝗼𝗻𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀

• Conduct full‑stack vulnerability assessments and penetration tests on web applications, microservices, APIs, and network infrastructure.

• Implement and customize Automated Security Reconnaissance (ASR) tools to accelerate threat surface analysis and discovery.

• Perform advanced Red Team exercises, simulating realistic adversary tactics, techniques, and procedures (TTPs) to evaluate detection and response capabilities.

• Analyze and interpret vulnerability scan results, prioritizing findings based on risk and business impact.

• Develop detailed exploitation proof‑of‑concepts (POCs) and provide actionable remediation guidance to stakeholders.

• Collaborate with DevSecOps teams to integrate security testing into CI/CD pipelines and development workflows.

• Mentor junior security analysts, conducting training sessions on vulnerability tools, exploitation techniques, and secure coding practices.

• Maintain up‑to‑date knowledge of emerging threats, exploits, and security frameworks, updating testing methodologies accordingly.

• Generate comprehensive reports and executive summaries that translate technical findings into clear, business‑relevant insights.

• Participate in incident response drills, providing expertise on breach containment, forensic analysis, and post‑incident remediation.

𝗪𝗵𝗮𝘁 𝗠𝗮𝗸𝗲𝘀 𝗬𝗼𝘂 𝗮 𝗚𝗿𝗲𝗮𝘁 𝗙𝗶𝘁

• 9+ years of hands‑on experience in vulnerability assessment, penetration testing, and red teaming across diverse technology stacks.

• Deep expertise in Automated Security Reconnaissance (ASR) tools such as Burp Suite, Zap, and custom scripting.

• Proficiency in exploiting web application vulnerabilities (SQLi, XSS, CSRF, OTN, SSRF) and infrastructure weaknesses (misconfigurations, privilege escalation).

• Advanced knowledge of OWASP ASVS, NIST SP 800‑53, and CIS Controls, with proven ability to map findings to industry standards.

• Strong programming prowess in Python, Bash, PowerShell, and scripting for automation and exploitation.

• Excellent communication skills, able to translate complex technical concepts to non‑technical audiences and produce clear, actionable reports.

• Experience in Red Team simulations, including threat modeling, attack choreography, and adversary emulation frameworks such as MITRE ATT&CK.

• Demonstrated success in integrating security testing into CI/CD pipelines and SecOps workflows.

• A proactive, continuous learning mindset with active participation in security communities, capture‑the‑flag events, and vulnerability research.

• A proven track record of mentoring junior analysts and fostering a collaborative security culture.

Apply

Apply at Weekday AI

About the Company

Weekday AI

Proactive software engineer recruitment via referrals

Weekday.works helps companies hire software engineers through proactive outreach and peer-recommended candidates. Its platform automates tracking, pipeline management, and provides weekly updates, while it actively identifies engineers via peer networks, reaches out, shortlists, checks references, and schedules interviews. Differentiators include peer-backed vetting instead of traditional job boards, proactive outreach, and a passive-income reference feature that monetizes referrals. The goal is to reduce the time and effort of hiring by connecting companies with pre-vetted engineers who are open to new opportunities through a network-driven approach.

Company size: 201-500
Company stage: Seed
Total funding: $2.3M
Headquarters: Bengaluru, India
Founded: 2021

Recently Posted Jobs

Explore more opportunities at Weekday AI

See more jobs