Cyber Defense Executive

• Conduct Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs, mobile applications, networks, and infrastructure.
• Perform internal and external security assessments to identify vulnerabilities and security gaps.
• Analyze security findings and provide remediation recommendations to stakeholders.
• Execute penetration testing using industry-standard tools and methodologies.
• Validate vulnerability fixes and conduct re-testing activities.
• Support secure configuration reviews and hardening assessments.
• Collaborate with development, infrastructure, and security teams to remediate vulnerabilities.
• Prepare detailed technical and executive-level VAPT reports.
• Participate in threat hunting, security monitoring, and incident response activities.
• Ensure compliance with security standards such as OWASP Top 10, NIST, ISO 27001, and CIS Benchmarks.
• Stay updated with emerging cyber threats, vulnerabilities, and attack techniques.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field.
• 2–4 years of hands-on experience in VAPT and Cyber Defense.
• Strong understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, and network protocols.
• Experience with vulnerability scanning and penetration testing tools such as:
  • Nessus
  • Qualys
  • Burp Suite
  • Nmap
  • OWASP ZAP
  • Metasploit
  • Wireshark
• Knowledge of web application security testing and OWASP Top 10 vulnerabilities.
• Experience in conducting infrastructure and network security assessments.
• Understanding of Windows, Linux, and Cloud security fundamentals (AWS/Azure/GCP).
• Familiarity with SIEM tools such as Splunk, QRadar, Sentinel, or ArcSight.
• Basic scripting knowledge in Python, PowerShell, or Bash is preferred.
• Strong analytical, troubleshooting, and report-writing skills.

Preferred Certifications

• CEH (Certified Ethical Hacker)
• eJPT (eLearnSecurity Junior Penetration Tester)
• PNPT (Practical Network Penetration Tester)
• OSCP (Preferred)
• CompTIA Security+
• ISO 27001 Lead Implementer/Auditor (Added Advantage)

Desired Competencies

• Strong problem-solving and analytical skills.
• Excellent communication and stakeholder management abilities.
• Ability to work independently and in a team environment.
• Strong documentation and reporting skills.
• Passion for cybersecurity and continuous learning.