VAPT Engineer – Secure SDLC & DevSecOps Specialist

About the role

Vidizmo is seeking a VAPT Engineer to strengthen its secure software development lifecycle (SDLC) and embed security best practices across all development stages. The role combines hands‑on vulnerability assessment, penetration testing, and DevSecOps expertise while ensuring AI‑generated outputs are rigorously validated.

Key responsibilities

• Perform in‑depth vulnerability assessments and penetration tests on systems, networks, and applications.
• Utilize industry‑standard tools such as Nessus, Nmap, Metasploit, and Burp Suite for automated and manual testing.
• Analyze findings, produce detailed reports with risk ratings and remediation recommendations.
• Collaborate with cross‑functional teams to prioritize and remediate identified vulnerabilities.
• Participate in red‑team exercises to simulate real‑world attacks and evaluate defensive measures.
• Review, validate, and take ownership of AI‑generated content, ensuring accuracy, compliance, and alignment with business requirements.

Required profile

• Proven experience in DevSecOps, secure coding, and vulnerability management.
• Strong judgment and accountability for final deliverables, even when AI tools are used.
• Up‑to‑date knowledge of emerging security threats, vulnerabilities, and best practices.

Required skills

• Vulnerability Assessment and Penetration Testing (VAPT).
• DevSecOps practices.
• Secure coding principles.
• Nessus.
• Nmap.
• Metasploit.
• Burp Suite.
• AI assistance tools (e.g., Claude, ChatGPT, Copilot).