Senior Security Consultant - VAPT

Position: Senior Security Consultant - VAPT

Job ID: SCV_002

Location: Andheri, Mumbai / Dombivli, Thane

Your responsibilities as a Senior Security Consultant:

1. Perform Manual and automated (tool-based) application security testing, with a focus on CRs (Change Requests).
2. Application Security Assessment (Web/Mobile/API/Thick Client) and VAPT for a wide range of business applications against standards such as OWASP Top 10.
3. Perform assessments involving manual testing and analysis as well as the use of automated web application, vulnerability scanning/testing tools.
4. Conduct Static and Dynamic mobile application security testing for Android based applications.
5. Handle kick-off meeting with project teams to understand the detailed architecture/ workflow of applications before starting the security assessment.
6. Define scope, objectives, and methodologies for assessments based on client requirements and industry best practices
7. Conduct comprehensive vulnerability assessments and penetration testing of networks, systems, applications, and infrastructure

Skill sets we require:

1. Advanced knowledge of penetration testing methodologies, tools, and techniques for assessing the security of networks, systems, applications, and infrastructure.
2. Proficiency in using a wide range of security tools, including vulnerability scanners (e.g., Nessus, Qualys), penetration testing frameworks (e.g., Metasploit, Burp Suite), and network sniffers (e.g., Wireshark).
3. Experience with manual testing and exploitation techniques to identify complex security vulnerabilities and weaknesses.
4. Understanding of common vulnerabilities and exposure to various attack vectors, such as SQL injection, cross-site scripting (XSS), buffer overflows, etc.
5. Familiarity with cloud platforms (e.g., AWS, Azure, GCP), IoT devices, and emerging technologies.

Pedigree and Experience:

1. Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2. Typically, 3 + years of experience in cybersecurity roles with a focus on vulnerability assessment and penetration testing.
3. Hands-on experience conducting vulnerability assessments, penetration tests, and security audits across diverse environments, including networks, systems, applications, and cloud platforms