Senior Security Consultant

Job Title: Sr. Security Consultant Job Location: Sanpada, Navi Mumbai Experience: 5+yr of experience We are looking for a highly skilled Senior Security Consultant with expertise in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud environments, and Active Directory. The ideal candidate will have hands-on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience. Requirements: Network & Infrastructure Security Testing Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching. Conduct port and service enumeration to identify attack surfaces. Execute infrastructure penetration testing on identified services. Web & Application Penetration Testing Identify and exploit OWASP Top 10 vulnerabilities in web applications. Assess SANS Top 25 vulnerabilities in application security. Perform business logic testing to uncover logical flaws in applications. Conduct penetration testing for Web, Mobile, API, and Thick Client applications. Cloud & Active Directory Security Testing Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths. Conduct cloud security penetration testing across AWS, Azure, and GCP. Review CIS Benchmark & NIST-based configurations for security gaps. Exploitation & Secure Code Review Perform manual and automated exploitation of vulnerabilities. Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic. Threat Modeling & Reporting Develop Threat Models to assess security risks proactively. Deliver detailed security reports with exploit demonstrations and mitigation strategies. Tools & Certifications Hands-on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools. Recommended certifications: CEH, eJPT, OSCP, eCPPT. Please note: Designation will be finalized based on the interview evaluation.