Cybersecurity / VAPT Professionals – Trainee to Team Lead

Company: G-Info Technology Solutions Private Limited (GISPL)

Location: Gurugram / Client Sites / Hybrid

Employment Type: Full-time

Experience: 0–10+ Years

Open Positions: Trainee | Junior Consultant | Consultant | Senior Consultant | Team Lead

About GISPL

G-Info Technology Solutions Private Limited (GISPL) is a CERT-In Empanelled Information Security Auditing Organization providing cybersecurity assessment, VAPT, security testing and compliance-focused security services to organisations across industries.

Our engagements span Web Applications, Mobile Applications, APIs, Network & Infrastructure, Cloud, Source Code, Backend Systems and other security assessments, with exposure to enterprise and regulated environments.

We are expanding our cybersecurity team and are looking for people at different stages of their cybersecurity journey.

This opportunity is NOT restricted to one experience level.

Whether you are

• A fresher looking to start your career in cybersecurity
• A trainee with lab/CTF experience
• A junior penetration tester
• An experienced VAPT consultant
• A senior security tester
• Or someone capable of independently leading VAPT engagements and teams

We would like to hear from you.

Who Are We Looking For?

We are interested in candidates with different levels of capability.

🟢 Trainee / Fresher

You could be suitable if you have

• Basic understanding of networking
• Linux fundamentals
• Basic cybersecurity concepts
• Familiarity with OWASP
• Hands-on experience with Kali Linux
• CTF/lab experience
• TryHackMe / Hack The Box / PortSwigger experience
• Basic scripting knowledge

Professional experience is not mandatory.

🔵 Junior Security Tester (0–2 years)

Expected to have some hands-on experience with

• Nmap
• Burp Suite
• Nessus/Qualys
• Linux
• Web application testing
• Basic API testing
• Vulnerability validation
• Basic report preparation

🟠 VAPT Consultant (2–5 years)

Expected to independently perform assessments across areas such as

• Web
• API
• Network
• Infrastructure
• Mobile
• Cloud

Strong understanding of vulnerability validation, exploitation, reporting and remediation is expected.

🔴 Senior Consultant / Team Lead (5+ years)

Expected to demonstrate

• Independent ownership of VAPT engagements
• Advanced web/API/network testing
• Manual exploitation capability
• Client interaction
• Report review
• Team mentoring
• Assessment planning
• Quality assurance
• Project/task management

Leadership capability and the ability to review another tester's work will be important.

Certifications

Relevant certifications include

• CEH
• OSCP
• eJPT
• PNPT
• CRTP
• Security+
• CREST certifications
• Cloud security certifications

Candidates without certifications but with demonstrable practical skills are also encouraged to apply.

Tools & Technologies

Depending on your level, exposure to the following is useful

Burp Suite | Nmap | Nessus | Qualys | Metasploit | Wireshark | Kali Linux | OWASP ZAP | BloodHound | SQLMap | Nikto | Gobuster | Postman | Android/iOS security tools | AWS/Azure security tools

You do not need to know every tool listed above.

Why Join GISPL?

• Work with a CERT-In Empanelled security auditing organization
• Exposure to real-world security assessments
• Work across Web, Mobile, API, Network, Cloud and other technologies
• Opportunity to work with enterprise and regulated-sector customers
• Exposure to compliance-driven security assessments
• Structured growth from Trainee → Consultant → Senior Consultant → Team Lead
• Opportunity to develop both technical and client-facing skills