Security Consultant

Location: Mumbai

Job Type: Full-time

Department: Cybersecurity

Notice Period: Immediate joiner

Experience: 2–7 years

Job Summary: The Security Tester will be responsible for performing security assessments of web, mobile, API and network security to identify vulnerabilities and support secure development practices.

Key Responsibilities:

1. Conduct manual and automated security testing on web, mobile and API applications
2. Perform SAST, DAST and SCA using industry-standard tools (e.g., Burp Suite, SonarQube, Checkmarx, Fortify, OWASP ZAP)
3. Identify, document and validate vulnerabilities based on OWASP Top 10 and SANS CWE-25
4. Work with engineering teams to support remediation with clear technical guidance
5. Review security requirements, design documents, source code and architecture for vulnerabilities
6. Conduct VAPT on servers and network devices
7. Analyze false positives and optimize tool configurations
8. Prepare detailed reports with risk ratings and reproduction steps
9. Conduct secure coding awareness sessions for developers
10. Track and verify fixes through retesting and continuous improvement
11. Must have knowledge of AI security

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field
• 2–7 years of experience in cyber security (no freshers allowed)
• Strong understanding of networking protocols, operating systems and application security
• Hands-on experience with VAPT tools (e.g., Burp Suite, Nessus, Metasploit, Nmap, Wireshark)
• Familiarity with programming/scripting languages (e.g., Python, Bash, PowerShell)
• Certifications such as CEH is mandatory, OSCP is preferred

To Apply: Send your resume and a cover letter to the recruiter by email, with the subject line "Application Security Consultant Application – [Your Name]".