VAPT & Information Security Specialist

About the role

Ventura is seeking a VAPT & Information Security Specialist to strengthen its digital platforms and protect client data. You will work across web, mobile, API, network and cloud environments, embedding security testing into the development lifecycle and supporting compliance initiatives.

Key responsibilities

• Conduct vulnerability assessments and penetration testing for web applications, APIs, mobile apps, networks and cloud (AWS, Azure, Google Cloud).
• Integrate security testing (SAST, DAST, dependency/SBOM scans) into CI/CD pipelines and track remediation SLAs.
• Perform comprehensive security assessments, risk analysis and threat modelling for client systems.
• Develop, review and maintain information security policies, standards and incident response plans.
• Lead compliance audits against SEBI CSCRF, ISO 27001, DPDP, GDPR, NIST and SOC 2.
• Support incident response activities, including log analysis, containment and post‑incident review.

Required profile

• 2‑7 years of hands‑on experience in cybersecurity, specifically VAPT.
• Strong knowledge of OWASP Top 10, SANS 25 and secure coding patterns.
• Experience with security best practices for AWS, Azure and Google Cloud.
• Proven ability to document findings and present risk reports to stakeholders.

Required skills

• Vulnerability Assessment & Penetration Testing (Web, Mobile, API, Network, Cloud)
• OWASP Top 10, SANS 25
• SAST, DAST, Dependency Scanning, SBOM Scanning
• Burp Suite, Nessus, Qualys, Metasploit, Nmap, Trivy
• AWS WAF, ModSecurity
• Cloud security for AWS, Azure, Google Cloud

What we offer

• Opportunity to work in a fast‑growing fintech vertical.
• Exposure to modern platforms and data‑led marketing initiatives.
• Collaborative environment with development and infrastructure teams.