اسنپ مارکت | Snapp Market

تاسیس در ۱۴۰۱ کامپیوتر، فناوری اطلاعات و اینترنت بیش از ۱۰۰۰ نفر

استخدام VAPT Lead

  • دسته‌بندی شغلی

    وب،‌ برنامه‌نویسی و نرم‌افزار
  • موقعیت مکانی

    تهران ، تهران
  • نوع همکاری

    تمام وقت
  • حداقل سابقه کار

    بیش از شش سال
  • حقوق

    توافقی

شرح موقعیت شغلی

Role Overview

We are looking for a hands-on Vulnerability Assessment & Penetration Testing (VAPT) Lead to lead security assessments and targeted Red Team exercises across applications, networks, infrastructure, and cloud environments. The role combines technical testing, team leadership, and collaboration with engineering and security teams to identify weaknesses, validate security controls, drive remediation, and strengthen security throughout the software development lifecycle.

Key Responsibilities

  • Lead and execute VAPT engagements across web and mobile applications, APIs, networks, infrastructure, cloud, Kubernetes, and container environments.
  • Define assessment scope and standards, including testing methodologies, rules of engagement, vulnerability severity criteria, reporting processes, and quality reviews.
  • Perform hands-on security testing, source code reviews, and vulnerability validation; assess business impact and prioritize security risks.
  • Lead Red Team and adversary-simulation exercises to identify realistic attack paths and validate security controls within authorized, clearly defined scopes. Collaborate with SOC and Blue Team to assess and improve detection and response capabilities.
  • Drive remediation through actionable reports, practical guidance, coordination with engineering teams, and retesting to verify fixes.
  • Integrate and automate security testing within the SDLC and CI/CD pipelines in collaboration with Development, DevOps, and SRE teams.
  • Lead and mentor VAPT engineers, review findings from internal and external sources, track security and remediation KPIs, and support incident investigations when required.
Required Skills

  • Penetration Testing: Strong practical experience in application, API, mobile, network, infrastructure, and cloud security assessments.
  • Red Team & Adversary Simulation: Hands-on experience with MITRE ATT&CK–aligned techniques, including initial access, privilege escalation, lateral movement, and defense evasion, with a strong understanding of engagement scoping and rules of engagement.
  • Security Assessment Techniques: Knowledge of OWASP, vulnerability exploitation, attack-path analysis, source code review, threat modeling, and security architecture.
  • Platform Security: Understanding of Linux, Windows, Kubernetes, containers, authentication, authorization, databases, and middleware security.
  • Tools & Automation: Proficiency with Burp Suite, Nmap, Metasploit, and scripting in Python, Bash, or Go.
  • DevSecOps: Experience with CI/CD security testing, including SAST, DAST, SCA, secret scanning, container scanning, and Infrastructure as Code (IaC) scanning.
  • Technical Leadership: Ability to mentor engineers, ensure assessment quality, communicate security risks clearly, and drive remediation across teams.

معرفی شرکت

Snapp Market, the largest online supermarket holding company in Iran, encompasses a range of diverse services in the supermarket industry. These services include Hyper Line, our online supermarket service offering scheduled delivery, Express Line, our fast delivery online supermarket service, Smart Line, our online chain supermarket service (Dark Store), and Market Pro Line, our wholesale supply service. These services have been designed and implemented with the aim of integrating operations, creating synergies, and providing a better shopping experience for our users.

The organization's core values lie in intelligence, dynamism, and reliability in delivering online supermarket services, driven by a team of over a thousand dedicated professionals.
  • مهارت‌های مورد نیاز

    تست نفوذ امنیت وب امنیت سایبری
  • جنسیت

    مهم نیست
  • وضعیت نظام وظیفه

    معافیت تحصیلی معافیت دائم پایان خدمت
  • حداقل مدرک تحصیلی

    کارشناسی

مشاغل مشابه

چه موردی را می‌خواهید گزارش کنید؟

از اینجا شروع کنید

در شغل بهتری استخدام شوید! رایگان!

  • جستجو و ارسال رزومه به آگهی‌های استخدام بیش از ۱۰۰,۰۰۰ شرکت ایرانی
  • رزومه‌ساز رایگان
  • دریافت فرصت‌های شغلی جدید مرتبط از طریق ایمیل (Job Alert)
  • شناخت محیط کار و فرهنگ سازمانی شرکت‌های در حال استخدام
image/svg+xml