Cybersecurity VM & VAPT L2, L3

The Cybersecurity VM & VAPT Analyst is responsible for managing Vulnerability Management (VM) and Vulnerability Assessment & Penetration Testing (VAPT) activities across the organization. This role handles escalated findings, coordinates remediation efforts, and works with IT, DevOps, and application teams to reduce security risks and improve the overall security posture.

Key Responsibilities
• Provide Level-2 support for vulnerability management and VAPT operations
• Perform and manage vulnerability scans across infrastructure, applications, cloud, and endpoints
• Analyse vulnerability findings, validate false positives, and assess risk severity
• Coordinate remediation with infrastructure, application, and DevOps teams
• Track vulnerabilities through closure and ensure SLA compliance
• Support internal and external VAPT exercises and penetration testing activities
• Review penetration test reports and assist in remediation planning
• Conduct risk-based vulnerability prioritization using CVSS and threat context
• Maintain VM dashboards, metrics, and regular reporting
• Develop and maintain VM/VAPT SOPs, standards, and playbooks
• Support audits and compliance requirements (ISO 27001, SOC 2, PCI DSS, etc.)
• Assist in post-remediation validation and re-testing

Required Skills & Qualifications
• years of experience in Vulnerability Management / VAPT / Cybersecurity
• Strong understanding of vulnerability assessment methodologies and OWASP Top 10
• Hands-on experience with VM tools (Qualys, Tenable, Rapid7, Nexpose, etc.)
• Familiarity with penetration testing tools and reports (Burp Suite, Nessus, Metasploit)
• Knowledge of operating systems, networks, and common attack vectors
• Experience with remediation tracking and risk acceptance processes
• Basic scripting skills (Python, Bash, PowerShell) preferred