Senior Security Consultant

Eventus Security Inc.; Delhi; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Eventus Security Inc. in Delhi, India seeks a Senior Security Consultant with 5+ years in VA/PT spanning web applications, infrastructure, cloud environments, and Active Directory.

The candidate will exploit vulnerabilities, review secure code, and perform threat modeling to strengthen cybersecurity resilience. Responsibilities include testing networks, applications, APIs, and AD, plus cloud security assessments and code reviews.

Qualifications

• 5+ years in vulnerability assessment and penetration testing across web apps, infrastructure, cloud and AD.
• Hands-on experience exploiting vulnerabilities and conducting secure code reviews.

Responsibilities

• Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
• Conduct port and service enumeration to identify attack surfaces.
• Execute infrastructure penetration testing on identified services.
• Identify and exploit OWASP Top 10 vulnerabilities in web applications.
• Assess SANS Top 25 vulnerabilities in application security.
• Perform business logic testing to uncover logical flaws in applications.
• Penetration testing for Web, Mobile, API, and Thick Client apps.
• Active Directory penetration testing to uncover misconfigurations and privilege escalation paths.
• Cloud security penetration testing across AWS, Azure, and GCP.
• Review CIS Benchmark & NIST-based configurations for security gaps.
• Manual and automated exploitation of vulnerabilities.
• Source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.

Skills

VA/PT experience

Threat modeling

Tools

Burp Suite

Nessus

OpenVAS

SQLmap

Job description

We are looking for a highly skilled Senior Security Consultant with 5+yrs in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud environments, and Active Directory. The ideal candidate will have hands-on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience.

Requirements

Network & Infrastructure Security Testing

• Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
• Conduct port and service enumeration to identify attack surfaces.
• Execute infrastructure penetration testing on identified services.
• Identify and exploit OWASP Top 10 vulnerabilities in web applications.
• Assess SANS Top 25 vulnerabilities in application security.
• Perform business logic testing to uncover logical flaws in applications.
• Conduct penetration testing for Web, Mobile, API, and Thick Client applications.

Cloud & Active Directory Security Testing

• Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
• Conduct cloud security penetration testing across AWS, Azure, and GCP.
• Review CIS Benchmark & NIST-based configurations for security gaps.
• Perform manual and automated exploitation of vulnerabilities.
• Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.

Threat Modeling & Reporting

• Develop Threat Models to assess security risks proactively.
• Deliver detailed security reports with exploit demonstrations and mitigation strategies.

Tools & Certifications

• Hands-on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools.
• Recommended certifications: CEH, eJPT, OSCP, eCPPT.