VAPT TRAINER - CYBERSECURITY
Posted Updated
Description
About the Role
C3iHub, IIT Kanpur, is seeking a technically strong and hands-on Vulnerability Assessment and Penetration Testing (VAPT) Trainer. The successful candidate will deliver practical cybersecurity training, develop lab exercises, demonstrate security testing methodologies, and help participants build job-ready skills in authorized and controlled environments.
- Deliver instructor-led sessions on VAPT, ethical hacking, network security, and web application security.
- Conduct tool-based demonstrations, guided hands-on labs, workshops, and scenario-based exercises.
- Explain technical concepts clearly to participants with varied levels of experience.
- Develop assignments, quizzes, practical assessments, and case studies.
- Demonstrate reconnaissance, information gathering, port scanning, service enumeration, and vulnerability identification.
- Conduct web application security testing, including OWASP Top 10 topics such as SQL injection, cross-site scripting (XSS), access-control weaknesses, and authentication/session issues.
- Explain network penetration testing, privilege escalation, and post-exploitation concepts in approved lab environments.
- Manually validate findings, assess severity and business impact, and recommend practical remediation.
- Configure and maintain isolated training labs using Kali Linux, virtual machines, Docker, and intentionally vulnerable applications.
- Use platforms such as DVWA, OWASP Juice Shop, and Metasploitable for practical exercises.
- Demonstrate tools such as Nmap, Burp Suite, Metasploit Framework, Wireshark, Nessus, OpenVAS/GVM, Nikto, Gobuster, SQLmap, and Netcat.
- Troubleshoot lab configuration, networking, tool installation, and participant technical issues.
- Prepare professional VAPT reports with evidence, severity ratings, impact, and remediation guidance.
- Create and update presentations, lab manuals, technical documentation, and practical demonstrations.
- Evaluate participants through practical tests and provide constructive feedback.
- Keep training content aligned with current security testing practices and methodologies.
Essential Technical Skills
- Strong practical knowledge of VAPT methodologies and vulnerability validation.
- Network security fundamentals, TCP/IP, common protocols, ports, and service enumeration.
- Web application security testing and OWASP Top 10.
- Hands-on experience with Kali Linux and familiarity with Windows security.
- Ability to interpret scanner output, reproduce findings safely, and recommend remediation.
- Technical reporting and documentation.
Qualifications and Experience
- Bachelor s degree in Computer Science, Information Technology, Cybersecurity, Electronics, or a related discipline.
- Minimum 3 years of relevant professional experience in VAPT, penetration testing, security assessment, or cybersecurity training with substantial hands-on exposure.
- Demonstrable ability to conduct security testing and troubleshoot technical issues independently.
- Experience delivering technical training, workshops, or knowledge-sharing sessions is preferred.
- Relevant certifications such as OSCP, CEH, eJPT, PNPT, CompTIA PenTest+, or equivalent are desirable; practical competence is a key consideration.
Preferred Additional Skills
- Active Directory security testing and Windows/Linux privilege escalation.
- API security testing and basic mobile application security testing.
- Python, Bash, or PowerShell scripting.
- CTF platforms, lab automation, and virtualized training environments.
- Familiarity with OWASP, NIST, and PTES guidance.
- Experience training government organizations, public-sector undertakings, law enforcement, or enterprise teams.
Training and Communication Skills
- Strong command of hands-on demonstrations and lab delivery.
- Ability to explain complex topics in simple, structured language.
- Patient, methodical troubleshooting and effective participant guidance.
- Good presentation, verbal communication, and technical writing skills.
- Ability to work to training schedules and develop practical assessments.
Candidate Evaluation
- Technical interview on VAPT methodology and security concepts.
- Live practical assessment covering enumeration, web testing, vulnerability validation, and remediation.
- Preparation or explanation of a sample VAPT report.
- A 15-20 minute teaching demonstration using an authorized lab.
Key Performance Expectations
- Quality and effectiveness of training delivery.
- Relevance, reliability, and safety of hands-on lab exercises.
- Participant engagement and improvement in practical competency.
- Accuracy of technical content and timely completion of training deliverables.
Required Skills
Cybersecurity training vapt
This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.