Role & responsibilities

- Perform VAPT engagements for web applications, APIs, networks, and systems
- Identify vulnerabilities including OWASP Top 10, misconfigurations, and logic flaws
- Conduct network and Active Directory penetration testing
- Execute web and API security assessments (SQLi, XSS, IDOR, RCE, etc.)
- Use tools like Burp Suite, Nmap, Nessus, Metasploit, SQLMap
- Interpret SAST & DAST results and support secure SDLC practices
- Prepare detailed VAPT reports with risk ratings and remediation steps
- Collaborate with developers and stakeholders to fix vulnerabilities
- Mentor junior team members and support project delivery

Required Skills

- Robust expertise in web, network, and API penetration testing
- Knowledge of OWASP Top 10, AD security, common protocols (SMB, HTTP, SSH, Kerberos)
- Hands-on with VAPT tools and frameworks
- Understanding of secure coding and basic cryptography

Certification:

- CEH
- CRTP
- OSCP

📌 Consultant / Senior Consultant - Cyber Security (Delhi)
🏢 Riskberg
📍 Delhi