Sr Engineer - Captive Operations

About The Company

Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications

Job Description – VAPT Engineer – Sr. Engineer – L1

Experience - 4-5 Years

Role Summary

We are looking for an experienced VAPT Engineer to perform security assessments of web, mobile, API, network, cloud, software, and embedded firmware. The candidate should have hands-on experience in SAST, DAST, secure code review, penetration testing, and should know good security practices.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web, mobile, APIs, network, wireless, cloud, and infrastructure.
• Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and secure code reviews.
• Identify, validate, prioritize, and report vulnerabilities with remediation recommendations.
• Perform API security testing and re-validation after remediation.
• Conduct firmware extraction, reverse engineering, binary analysis, and embedded device security assessments.
• Integrate security testing into CI/CD pipelines and support Secure SDLC initiatives.
• Collaborate with development, DevOps, and infrastructure teams to improve application and firmware security.
  
  

Required Technical Skills or should have worked on below tool any one is a must.

• SAST: Checkmarx, Fortify, Veracode, SonarQube, Semgrep, CodeQL.
• DAST: Burp Suite Pro, Fortify, OWASP ZAP, AppScan, Acunetix, Invicti (Netsparker).
• VAPT Tools: Nessus, Qualys, Nmap, Metasploit, SQLMap, Wireshark.
  
  

Mandatory Tool Experience

• Qualys Guard (VA)
• HP Fortify (Source Code Review)
  
  

Qualification And Experience

• Should be BE/B.Tech/BCA/MCA/BSC (IT/Computer related technologies) with minimum 3-4 years of experience in the field of IT Security for handling
• Should have CCNA/CEH or Any SIEM Technical certification/Any Firewall Technical Certification.
  
  

Selection Process : - Internal interview Process followed by Customer round.