Role Overview We are looking for a skilled VAPT Consultant to join our Risk Advisory practice, responsible for identifying, analyzing, and helping clients remediate security vulnerabilities across networks, applications, and infrastructure.

Key Responsibilities

- Conduct Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications, APIs, networks, and infrastructure

- Perform network penetration testing (internal/external), configuration reviews, and firewall rule reviews

- Conduct web/mobile application security testing based on OWASP Top 10, OWASP MASVS, and SANS 25

- Perform source code review (manual/automated) as required

- Prepare detailed technical reports with risk ratings, findings, and remediation recommendations

- Support red team/purple team exercises where applicable

- Use tools such as Burp Suite, Nessus, Nmap, Metasploit, Acunetix, Qualys, Nexpose, Kali Linux

- Engage with client stakeholders to present findings and remediation roadmaps

- Stay current with emerging threats, CVEs, exploits, and attack techniques

- Support proposal writing, scoping,



and effort estimation for VAPT engagements

- Mentor junior team members on testing methodologies

Required Skills & Qualifications

- Bachelor's degree in Computer Science, IT, or related field

- 3–5 years of hands-on experience in VAPT/penetration testing (preferably in a consulting/advisory environment)

- Robust knowledge of network protocols, OS internals (Windows/Linux), and web technologies

- Hands-on expertise with tools: Burp Suite, Metasploit, Nmap, Nessus, Wireshark, Kali Linux

- Understanding of OWASP Top 10, OWASP MASVS, MITRE ATT&CK; framework

- Scripting/automation skills (Python, Bash, PowerShell) preferred

- Certifications preferred: OSCP, CEH, CPENT, GPEN, GWAPT, CREST (CRT)

- Strong report writing and client communication skills

- Willingness to travel for client engagements, if required

Pay: ₹929,164.96 - ₹2,242,259.91 per year

Application Question(s)

- What is your notice period?

- What is your current CTC?

- What is your expected CTC?

Work Location: In person

📌 Senior Consultant – VAPT (Gurugram)
🏢 RiskMan Consulting
📍 Gurugram