Position: Cybersecurity Associate (VAPT)

Location: Kathmandu, Nepal (On-site)

About the Role

As a Cybersecurity Associate focusing on Vulnerability Assessment and Penetration Testing (VAPT), you will help to identify security weaknesses across applications, networks, and systems. You will work with the security team to perform security assessments, validate vulnerabilities, and support remediation efforts. This role provides hands-on exposure to real-world security testing techniques, tools, and methodologies used to strengthen organizational security posture.

Responsibilities

• Perform vulnerability assessments on web applications, networks, and systems
• Assist in penetration testing activities to identify exploitable security weaknesses
• Conduct security scans and analyze findings to identify potential risks
• Validate vulnerabilities and assess their impact on systems and applications
• Document security findings and provide clear remediation recommendations
• Support preparation of VAPT reports for clients and internal teams
• Work with development and infrastructure teams to verify remediation actions
• Stay updated with emerging vulnerabilities, exploits, and attack techniques
• Assist in improving testing methodologies, checklists, and internal security tools
• Participate in internal knowledge sharing and security research activities

Essential skills, abilities & knowledge

• Understanding of web application architecture and common vulnerabilities
• Knowledge of networking concepts (TCP/IP, DNS, HTTP, HTTPS)
• Familiarity with operating systems such as Windows and Linux
• Basic understanding of common vulnerabilities such as SQL Injection, XSS, and authentication flaws
• Familiarity with security testing tools such as Burp Suite, Nmap, and OWASP ZAP
• Understanding of vulnerability assessment and penetration testing methodologies such as OWASP Testing Guide or SANS TOP 25.
• Strong analytical and problem-solving skills
• Good technical documentation and reporting skills
• Ability to think like an attacker while maintaining structured testing methodology

Work experience

Minimum 1 years of experience in vulnerability assessment, penetration testing, or a related cybersecurity field

We appreciate all applications, but only shortlisted candidates will be contacted for an interview