Senior Security Consultant

Job Title: Senior Security Consultant

Job Location: Sanpada, Navi Mumbai

Experience: 5+ yrs

We are looking for a highly skilled Senior Security Consultant with expertise in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud environments, and Active Directory. The ideal candidate will have hands-on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience.

Requirements:

Network & Infrastructure Security Testing

• Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
• Conduct port and service enumeration to identify attack surfaces.
• Execute infrastructure penetration testing on identified services.

Web & Application Penetration Testing

• Identify and exploit OWASP Top 10 vulnerabilities in web applications.
• Assess SANS Top 25 vulnerabilities in application security.
• Perform business logic testing to uncover logical flaws in applications.
• Conduct penetration testing for Web, Mobile, API, and Thick Client applications.

Cloud & Active Directory Security Testing

• Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
• Conduct cloud security penetration testing across AWS, Azure, and GCP.
• Review CIS Benchmark & NIST-based configurations for security gaps.

Exploitation & Secure Code Review

• Perform manual and automated exploitation of vulnerabilities.
• Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.

Threat Modeling & Reporting

• Develop Threat Models to assess security risks proactively.
• Deliver detailed security reports with exploit demonstrations and mitigation strategies.

Tools & Certifications

• Hands-on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools.
• Recommended certifications: CEH, eJPT, OSCP, eCPPT.