Security Managed Services Lead (VAPT)

Key Responsibilities

• Lead the planning, execution, and delivery of Vulnerability Assessment and Penetration Testing (VAPT) engagements across network, application, endpoint, cloud, and hybrid environments.
• Execute and support advanced red team operations, adversary emulation exercises, and threat simulations to assess the effectiveness of security controls, detection capabilities, and incident response processes.
• Partner with client stakeholders and internal teams to define engagement scope, objectives, rules of engagement, and risk priorities.
• Identify, validate, and exploit security vulnerabilities using industry-standard methodologies, frameworks, and tools while maintaining high standards of professionalism and ethical conduct.
• Analyze threat intelligence, emerging attack techniques, and adversary tactics aligned with frameworks such as MITRE ATT&CK to enhance the effectiveness and relevance of security assessments.
• Develop clear, accurate, and executive-ready reports that communicate technical findings, business risks, and prioritized remediation actions.
• Mentor junior security practitioners by providing technical guidance, knowledge sharing, and support in offensive security techniques, tooling, and reporting practices.
• Contribute to the continuous improvement of VAPT methodologies, red team playbooks, automation capabilities, and service delivery standards to drive operational excellence and client value.

Required Qualifications

• Bachelor’s degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related discipline.
• Proven experience performing penetration testing, vulnerability assessments, and offensive security engagements across enterprise environments.
• Strong hands-on experience with application security testing, network penetration testing, cloud security assessments, and exploitation techniques.
• Deep understanding of modern attack methodologies, adversary tactics, and security frameworks, including MITRE ATT&CK and OWASP.
• Experience creating technical assessment reports and presenting findings to both technical and non-technical stakeholders.
• Strong problem-solving, analytical, and communication skills, with the ability to manage multiple priorities in a dynamic environment.
• Ability to collaborate effectively across teams and contribute to key security decisions and strategic initiatives.

Preferred Qualifications

• Industry certifications such as OSCP, OSEP, OSWE, CRTO, CREST, GPEN, GWAPT, GXPN, CISSP, or equivalent.
• Experience conducting red team operations, purple team exercises, and threat-led security assessments.
• Knowledge of cloud platforms such as Microsoft Azure, AWS, and Google Cloud Platform (GCP).
• Experience with security automation, scripting, and offensive security tooling.
• Familiarity with Security Operations Center (SOC) processes, threat hunting, and detection engineering.