Cyber Security - VAPT

Work Level: Individual

Core: Communication Skills, Keep Deadlines, Networking

Leadership: Building Work Relationships, Team Alignment, Responsive, Working Independently

Role:

Industry Type: Banking

Function: Cyber Security / IT Risk

Key Skills: Vulnerability,Vulnerability Assessment,VAPT,Cyber Security,Cybersecurity Framework,Kubernetes,Docker,PCI DSS,Nist,NIST CSF,ISMS (ISO 27001)

Education: Other

Education Other: BTech

Note: This is a requirement for one of the Workassist Hiring Partner.

Primary Responsibility:

Perform periodic vulnerability scanning across enterprise environments including

Vulnerability Assessment & Risk Management

1. Operating systems such as Windows, Linux, and Unix
2. Network infrastructure devices including firewalls, routers, and switches
3. Databases and middleware platforms
4. Workstations, endpoints, and application servers
5. Public-facing and internet-accessible systems.
6. Conduct both authenticated and unauthenticated security scans and verify the accuracy of scan findings.
7. Carry out external vulnerability assessments and evaluate potential exposure points within the organization.
8. Assist in network segmentation validation and penetration testing activities to ensure proper isolation of critical systems.

Secure Configuration & System Hardening:

1. Evaluate system configurations against CIS benchmarks, vendor hardening guides, and industry best practices.
2. Verify remediation actions by performing follow-up validation scans after vulnerabilities have been addressed.
3. Assess patch levels and secure configuration compliance across infrastructure components.
4. Work closely with infrastructure, network, and application teams to prioritize and remediate identified vulnerabilities.

Container and Cloud Security Assessments:

1. Perform vulnerability scanning of container images and container runtime environments.
2. Identify security weaknesses in Docker and Kubernetes deployments.
3. Support vulnerability assessment and security monitoring for cloud-hosted workloads in platforms such as AWS, Azure, and GCP.

Vulnerability Analysis, Metrics & Reporting

1. Evaluate vulnerabilities based on CVSS scores, exploit availability, threat likelihood, and potential business impact.
2. Generate detailed vulnerability assessment reports, dashboards, and performance metrics.
3. Track remediation progress and escalate critical or overdue vulnerabilities according to defined SLAs.

Compliance & Security Governance Support

1. Ensure vulnerability management practices support regulatory and industry standards including:
2. Reserve Bank of India Cybersecurity Framework
3. ISO/IEC 27001
4. PCI DSS
5. NIST Cybersecurity Framework and CIS Controls
6. Assist with internal and external audit activities by providing vulnerability reports, evidence of remediation, and compliance documentation.

Company Description

Workassist is an online recruitment and employment solution providing a platform in India. We connect job seekers with relevant profiles to employers and offer a wide range of job opportunities across different industries and levels of experience. Our e-recruitment technology enables us to quickly adapt to the new normal and assist both job seekers and employers in finding the right match.

We work with more than 10,000+ recruiters from sectors such as Banking & Finance, Consulting, Sales & Marketing, HR, IT, Operations, and legal to help them recruit great emerging talents. Our goal is to enhance the job seeking experience and provide the best opportunities for job seekers and the best talent for employers from all over the world.

For a seamless job search experience, please visit: https://bit.ly/3QBfBU2.

(Note: There are many more opportunities apart from this on the portal. Depending on the skills, you can apply for them as well).

So, if you are ready for a new challenge, a great work environment, and an opportunity to take your career to the next level, dont hesitate to apply today. We are waiting for you!