AVP-VAPT

Responsibilities

• Own and lead the Offensive Security & VAPT function, including service line P&L, strategic delivery roadmap, and team management
• Architect and oversee enterprise-scale VAPT and red team engagements across infrastructure, applications, APIs, mobile, and cloud
• Engage directly with senior client stakeholders (CISOs, CTOs) to translate business risk into actionable technical assessments
• Define testing frameworks and reusable methodologies for red teaming and threat emulation
• Direct a high-performing offensive security team including Red Teamers and AppSec specialists
• Lead strategic threat modeling and secure design reviews in collaboration with client engineering teams
• Govern the quality of technical findings and executive-ready reports
• Drive operational excellence ensuring timelines, SLAs, and KPIs are met
• Spearhead R&D initiatives to evaluate emerging threats and offensive tools
• Collaborate with internal MXDR, GRC, and Incident Response teams

Requirements

• Bachelor's degree in Engineering, Computer Science, or a related field
• 15+ years of experience in cybersecurity
• 5+ years in leadership roles across VAPT, Red Team, or Application Security domains
• Demonstrated experience managing technical delivery for multiple clients or large-scale programs
• Mandatory certifications: OSCP, CEH
• Proficiency in cloud security testing (AWS, Azure, or GCP)
• Hands-on exposure to attacking applications in C++, Java, Python, Go, or JavaScript
• Knowledge of OWASP Top 10, MITRE ATT&CK, and tools like Burp Suite Pro, Cobalt Strike, and Metasploit

Preferred Qualifications

• Master's degree
• Certifications: OSCE, OSWE, GPEN, GWAPT, GCIH, GXPN, or CISSP
• Experience with Kubernetes, containerized environments, and CI/CD pipelines

About the Company

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant through MXDR, attack surface management, and AI-driven intelligence.