VAPT Engineer

We’re looking for a passionate professional to strengthen our secure software development lifecycle (SDLC) and integrate security best practices into every stage of development. The ideal candidate will have hands-on experience in DevSecOps, secure coding, and vulnerability management — with VAPT skills being a plus. VIDIZMO is a USA-based technology company headquartered in Tysons, Virginia, and a Microsoft Solutions Partner in Data & AI , Infrastructure , and Digital & App Innovation . Offering a AI-Powered Intelligence Hub , we empower Fortune 500 companies , large enterprises , governments, and the public sector to securely manage, analyze, and govern their data with complete control and compliance. Our Multimodal AI Data Intelligence Platform leverages Large Language Models (LLMs) and RAG (Retrieval-Augmented Generation) to deliver powerful capabilities such as auto-tagging , redaction , content summarization , OCR , translation , subtitle creation , object detection and tracking , content search , sentiment and emotion analysis , topic extraction , document classification , and facial attribute detection. AI Output Verification & Accountability (Required Competency) The candidate must be capable of effectively using AI tools (e.g., Claude, ChatGPT, Copilot, or similar) to support work outputs such as content, analysis, documentation, or code. However, the candidate must also demonstrate strong judgment and ownership of the final deliverables. AI-generated output must never be treated as final without review. The candidate is expected to validate accuracy, completeness, logic, compliance, and alignment with business requirements, and refine AI-assisted work to meet the expected quality standards. The individual will be held accountable for the final output, regardless of whether AI tools were used during execution.

Perform in-depth vulnerability assessments and penetration tests on systems, networks, and applications to uncover security weaknesses and potential threats. Responsibility for reviewing and validating AI-generated outputs Ownership of final deliverables, regardless of AI assistance Ability to critically evaluate AI results and ensure they meet defined requirements Accountability for accuracy, quality, and compliance Utilize a variety of industry-standard tools and methodologies, including Nessus, Nmap, Metasploit, Burp Suite, and others, for both automated and manual testing. Analyze assessment results meticulously, creating detailed reports outlining identified vulnerabilities, associated risks, and recommended remediation strategies. Collaborate with cross-functional teams to prioritize and address discovered vulnerabilities based on their severity and potential impact on our organization. Stay updated on the latest security threats, vulnerabilities, and best practices in cybersecurity. Participate in red team exercises to simulate real-world cyber attacks, evaluating defensive measures and incident response capabilities. Contribute to the development and improvement of security policies, procedures, and guidelines based on assessment findings and industry standards. Provide mentorship and support to junior team members, including training on security assessment methodologies and tools.