We are looking for a highly skilled Senior Security Consultant with 5+yrs in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud settings, and Active Directory. The ideal candidate will have hands-on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience.

Requirements

Network & Infrastructure Security Testing
Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
Conduct port and service enumeration to identify attack surfaces.
Execute infrastructure penetration testing on identified services.

Web & Application Penetration Testing
Identify and exploit OWASP Top 10 vulnerabilities in web applications.
Assess SANS Top 25 vulnerabilities in application security.
Perform business logic testing to uncover logical flaws in applications.
Conduct penetration testing for Web, Mobile, API, and Thick Client applications.





Cloud & Active Directory Security Testing
Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
Conduct cloud security penetration testing across AWS, Azure, and GCP.
Review CIS Benchmark & NIST-based configurations for security gaps.

Exploitation & Secure Code Review
Perform manual and automated exploitation of vulnerabilities.
Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.

Threat Modeling & Reporting
Develop Threat Models to assess security risks proactively.
Deliver detailed security reports with exploit demonstrations and mitigation strategies.

Tools & Certifications
Hands-on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools.
Recommended certifications: CEH, eJPT, OSCP, eCPPT.

📌 Senior Security Consultant Delhi (India)
🏢 Eventus Security
📍 India