Prepare high-quality technical documentation and reports for both technical and non-technical stakeholders, develop and maintain testing report templates, work closely with application development teams, and clearly communicate VAPT findings with recommended remediation actions.
Bachelor’s degree in Information Security, Cyber Security, Risk Management, Compliance, or related field.
Minimum 6 years of relevant experience in cybersecurity, penetration testing, or vulnerability management roles....
Manage the external penetration testing firm relationship — scoping, reviewing methodologies, validating findings, and ensuring remediation is tracked. Led by Sr VAPT Engineers.
Own the bank's AI red-team programme, testing the bank’s adopted large language models, RAG pipelines, MCP-connected agents, and agentic workflows.
Apply MITRE ATLAS (v5.4.0) techniques to simulate AI-targeted attacks: model API reconnaissance, training data poisoning, model evasion, prompt injection, indirect prompt injection via RAG documents, and confused-deputy attacks in agent-to-agent workflows....