Cybersecurity Engineer (VAPT)

About the role

Ventura is seeking a Cybersecurity Engineer specialized in Vulnerability Assessment and Penetration Testing (VAPT) to strengthen its digital‑first fintech platform. You will work closely with development and infrastructure teams to embed security throughout the software lifecycle and protect client data across web, mobile, API and cloud environments.

Key responsibilities

• Conduct VAPT for web applications, networks, APIs, mobile apps and cloud (AWS) infrastructure, integrating security testing into CI/CD pipelines.
• Perform comprehensive security assessments, risk analyses, threat modeling and produce detailed risk reports for stakeholders.
• Develop, review and maintain information security policies, standards and incident response plans.
• Lead compliance audits and gap assessments against frameworks such as SEBI CSCRF, ISO 27001, GDPR, NIST and SOC 2.
• Support incident response activities, analyze logs, contain threats and provide post‑incident recommendations.

Required profile

• 3–8 years of hands‑on experience in cybersecurity, preferably within the BFSI or broking sector.
• Proven expertise in VAPT for web, mobile, API and cloud environments.
• Relevant certifications such as CEH, CISA, CISSP or ISO 27001 Lead Auditor are preferred.

Required skills

• Deep knowledge of OWASP Top 10, SANS 25 and business‑logic flaw mitigation.
• Experience with security tools: Burp Suite, Nessus, Qualys, Metasploit, Nmap, Trivy.
• Proficiency in cloud security for AWS, Azure and Google Cloud, including WAF rule creation (AWS WAF, ModSecurity).
• Familiarity with container platforms (Kubernetes, Docker) and cloud components (S3, load balancers).
• Audit planning, compliance management and understanding of IT General Controls (ITGCs).