Vulnerability Assessment & Penetration Testing (VAPT) Analyst - ITSD

Job Description

Title: Vulnerability Assessment & Penetration Testing (VAPT) Analyst - ITSD

Company Name: Mutual Trust Bank PLC

Vacancy: --

Age: Na

Job Location: Dhaka

Salary: --

Experience:

• At least 3 years

• Bachelor/Honors
• Bachelor of Science (BSc) in Computer Science

• Bachelor’s degree in Computer Science or a related discipline. The candidate must be from a UGC-approved university. No third division/class or equivalent CGPA is allowed at any stage of the academic career.

• At least 3 years

• 2–3 years of experience in vulnerability assessments, penetration testing, ethical hacking, or offensive security roles.

• Preferred certifications: eJPT, CEH, or similar industry-recognized certifications in offensive security.

• Familiarity with OWASP Top 10, MITRE ATT&CK, CVSS scoring, and secure coding principles.

• Practical experience with penetration testing tools and scripting (Python, Bash, PowerShell).

• Knowledge of networks, web protocols, operating systems (Windows/Linux), and authentication mechanisms.

• Clear, concise reporting skills for both technical and non-technical audiences.

• Experience in defensive security or exposure to bug bounty programs, CTF competitions, or security communities is a plus.

• Strong analytical, communication, and collaboration skills.

The incumbent will be responsible for conducting vulnerability assessments and penetration testing across the Bank’s applications and infrastructure. This role is focused on identifying, analyzing, and reporting security weaknesses while supporting development and infrastructure teams in timely remediation.

Key Responsibilities:

• Conduct end-to-end vulnerability assessments and penetration testing of web/mobile applications, APIs, and internal/external infrastructure.

• Utilize tools such as Burp Suite, Nmap, Nessus, Metasploit, SQLmap, and OWASP ZAP in combination with manual testing techniques.

• Analyze findings for impact and exploitability; document and present technical and executive-level reports with clear remediation guidance.

• Define engagement scopes, rules of engagement, and test plans.

• Collaborate with development and infrastructure teams to validate and track resolution of vulnerabilities.

• Maintain detailed documentation of test results, methodologies, and security assessment procedures.

• Continuously monitor the security landscape and contribute to process improvements and knowledge sharing within the team.

• Support and complement the organization’s broader security posture through VAPT, secure coding, and offensive security inputs.