About the Role:

We are looking for a highly skilled Security Consultant with 3+ years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT). The ideal candidate should have expertise in conducting security assessments of Web Applications, Mobile Applications (Android & iOS), APIs, and Network Infrastructure. The role also requires experience in Red Teaming, Phishing Simulations, Social Engineering Exercises, and Cyber Drills.

Key Responsibilities:

- Perform Vulnerability Assessment and Penetration Testing (VAPT) for:

- Web Applications
- Mobile Applications (Android & iOS)

- APIs and Web Services
- Internal & External Network Infrastructure
- Identify, validate, and exploit security vulnerabilities through manual and automated testing.
- Conduct comprehensive security assessments and penetration testing engagements.
- Perform Internal Red Teaming exercises, phishing campaigns, and social engineering simulations.
- Execute cyber drills and attack simulations to evaluate organizational security posture.
- Analyze security findings and provide actionable remediation recommendations.
- Prepare detailed technical and executive-level security assessment reports.
- Collaborate with Development, DevOps, Infrastructure, and Security teams to address identified vulnerabilities.
- Research emerging attack techniques,



vulnerabilities, and security best practices.
- Support security awareness initiatives and incident response activities when required.

Required Skills & Technical Expertise

Security Domains

- Vulnerability Assessment & Penetration Testing (VAPT)
- Mobile Application Security Testing (Android & iOS)
- API Security Testing
- Network Security Assessment
- Red Teaming & Adversary Simulation
- Social Engineering & Phishing Assessments

Security Frameworks & Methodologies
- OWASP Top 10
- OWASP Mobile Top 10
- API Security Best Practices
- Network Security Concepts
- PTES (Penetration Testing Execution Standard)
- MITRE ATT&CK; Framework

Security Tools
- Burp Suite
- OWASP ZAP
- Nmap
- Nessus / Qualys
- Metasploit
- MobSF
- Wireshark
- Postman
- Nikto
- SQLMap (Positive to Have)

Required Qualifications
- Minimum 3 years of experience in VAPT and Penetration Testing.
- Strong understanding of application, API, mobile, and network security.
- Experience in identifying and validating vulnerabilities through manual testing techniques.
- Good knowledge of common attack vectors, security controls, and mitigation mechanisms.
- Excellent analytical, troubleshooting, and report-writing skills.
- Strong communication and stakeholder management abilities.

📌 Security Analyst (Pune)
🏢 Bajaj Finserve
📍 Pune