Role & responsibilities

- Perform VAPT engagements for web applications, APIs, networks, and systems

- Identify vulnerabilities including OWASP Top 10, misconfigurations, and logic flaws

- Conduct network and Active Directory penetration testing

- Execute web and API security assessments (SQLi, XSS, IDOR, RCE, etc.)

- Use tools like Burp Suite, Nmap, Nessus, Metasploit, SQLMap

- Interpret SAST & DAST results and support secure SDLC practices

- Prepare detailed VAPT reports with risk ratings and remediation steps

- Collaborate with developers and stakeholders to fix vulnerabilities

- Mentor junior team members and support project delivery

Required Skills

- Robust expertise in web, network, and API penetration testing

- Knowledge of OWASP Top 10, AD security, common protocols (SMB, HTTP, SSH, Kerberos)

- Hands-on with VAPT tools and frameworks

- Understanding of secure coding and basic cryptography

Certification:

- CEH

- CRTP

- OSCP

📌 Consultant / Senior Consultant - Cyber Security (Delhi)
🏢 Riskberg
📍 Delhi