Sr. Security Consultant

Eventussecurity; Navi Mumbai; On-site; INR 600,000 - 1,000,000; Full time

Job summary

A cybersecurity firm in Navi Mumbai is looking for a skilled security tester to perform vulnerability assessments and penetration testing. Ideal candidates will have certifications such as OSCP and CEH, along with a strong understanding of network traffic analysis and application security. You'll be collaborating with a global team and must possess good communication skills. The role offers the opportunity to work with various security tools and frameworks.

Qualifications

• Able to perform vulnerability assessment and penetration testing.
• Good understanding of cloud providers such as AWS, Azure & GCP.
• Good to have certifications like eJPT, eCPPT, Pentest.

Responsibilities

• Perform application security testing including web applications and APIs.
• Conduct infrastructure penetration testing on identified ports and services.
• Collaborate with team members for daily activities.

Skills

Vulnerability Assessment

Penetration Testing

API Testing

Network traffic analysis

Basic understanding of OWASP TOP 10

Basic understanding of security tools

Exploitation activities

Application security testing

Configuration reviews

Source code review

Active directory penetration testing

Open-source intelligence assessments

Phishing assessments

Good communication skills

Education

OSCP Certification

CEH Certification

ECSA Certification

Tools

sqlmap

BurpSuite

Nessus

OpenVAS

Job description

Vulnerability Assessment, Penetration Testing, API Testing, Essential

Skills/Certifications: OSCP, CEH, ECSA, CRTP, PNPT, CRTA.

OSCP Certified, CREST Certified is an added advantage

• Basic understanding of network traffic analysis including TCP/IP, routing, switching, protocols, etc.
• Basic understanding of OSI & TCP/IP Model.
• Basic understanding of different ports and services.
• Basic understanding of OWAP TOP 10
• Basic understanding of SANS TOP 25
• Basic understanding of various security tools like sqlmap, BurpSuite, Nessus, OpenVAS, etc.
• Basic understanding on vulnerability assessment and penetration testing
• Able to perform exploitation activities for different vulnerabilities.
• Able to perform application security testing including web applications, mobile applications, API & thick client applications.
• Able to perform configuration reviews using CIS Benchmarks and NIST Frameworks.
• Able to perform infrastructure penetration testing on identified ports and services.
• Able to perform source code review for languages like Java, .Net, python, ReactJS, Kotlin, Iconic, etc.
• Able to perform active directory penetration testing.
• Good understanding of cloud providers such as AWS, Azure & GCP.
• Able to perform open-source intelligence (OSINT) assessments.
• Able to perform Phishing assessments.
• Good communication & interpersonal skills.
• Collaborate and assist within team member for various day to day activities.
• Good to have certifications like CEH, eJPT, OSCP, eCPPT, Pentest

Get 24/7 incident response assistance from our global team