Senior Security Consultant

Eventus Security; Navi Mumbai; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Eventus Security in Navi Mumbai is seeking a highly skilled Senior Security Consultant. The role emphasizes expertise in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, cloud environments, and infrastructure. Candidates should possess hands-on experience in exploiting vulnerabilities and performing security assessments.

Responsibilities include conducting network traffic analysis, executing penetration tests, and delivering detailed security reports. Successful candidates will be evaluated based on their qualifications and experience.

Responsibilities

• Conduct vulnerability assessments and penetration testing across various environments.
• Perform network traffic analysis to identify security risks.
• Review configurations for security gaps based on standards.

Skills

Vulnerability Assessment

Penetration Testing

Network Traffic Analysis

Active Directory Security

Cloud Security Testing

Threat Modeling

Burp Suite

SQLmap

Nessus

OpenVAS

Education

Relevant Certifications (CEH, eJPT, OSCP, eCPPT)

Job description

We are looking for a highly skilled Senior Security Consultant with expertise in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud environments, and Active Directory. The ideal candidate will have hands‑on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience.

Requirements

Network & Infrastructure Security Testing

• Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
• Conduct port and service enumeration to identify attack surfaces.
• Execute infrastructure penetration testing on identified services.
• Identify and exploit OWASP Top 10 vulnerabilities in web applications.
• Assess SANS Top 25 vulnerabilities in application security.
• Perform business logic testing to uncover logical flaws in applications.
• Conduct penetration testing for Web, Mobile, API, and Thick Client applications.

Cloud & Active Directory Security Testing

• Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
• Conduct cloud security penetration testing across AWS, Azure, and GCP.
• Review CIS Benchmark & NIST-based configurations for security gaps.
• Perform manual and automated exploitation of vulnerabilities.
• Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.

Threat Modeling & Reporting

• Develop Threat Models to assess security risks proactively.
• Deliver detailed security reports with exploit demonstrations and mitigation strategies.

Tools & Certifications

• Hands‑on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools.
• Recommended certifications: CEH, eJPT, OSCP, eCPPT.

Please note: Designation will be finalized based on the interview evaluation.