Consultant - Technical Consulting

Consultant - Technical Consulting

Drive Technical Excellence through Consulting: Conducting comprehensive assessments, vulnerability analyses, and delivering insightful reports while staying abreast of emerging threats and technologies.

Gurugram, Haryana

Gurugram, Haryana

Apply Now

Responsibilities

• Conduct comprehensive security assessments of our systems, networks, and applications through both automated scanning tools and manual testing techniques
• Identify and exploit vulnerabilities to assess the effectiveness of existing security controls
• Produce detailed reports outlining findings, potential risks, and recommended remediation strategies
• Perform in-depth security reviews of web and mobile applications to identify security flaws and weaknesses
• Collaborate with development teams to integrate security best practices into the software development lifecycle
• Design and implement security controls to mitigate identified risks and enhance the security posture of applications
• Plan, coordinate, and execute simulated cyber-attacks to evaluate the resilience of our infrastructure and applications
• Mimic real-world threat scenarios to identify weaknesses and gaps in existing security defenses
• Work closely with blue teams to enhance incident response capabilities and strengthen overall security posture
• Conduct thorough source code reviews to identify security vulnerabilities, design flaws, and coding errors
• Analyze codebase for common security pitfalls such as injection vulnerabilities, authentication issues, and insecure configurations
• Provide actionable recommendations to developers for improving code security and resilience
• Develop and implement device hardening guidelines and standards to secure endpoints, servers, and network devices
• Configure and deploy security controls such as firewalls, intrusion detection/prevention systems, and endpoint protection solutions
• Monitor and update device configurations to adapt to evolving threats and security requirements

Qualifications

• Bachelors degree in Computer Science, Information Security, or related field (Masters degree preferred)
• Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), or equivalent certifications preferred
• 2-5yrs of experience in conducting VAPT assessments, application security reviews, and Red Team exercises
• Strong understanding of common security vulnerabilities and attack vectors, as well as mitigation strategies
• Proficiency in source code review techniques and familiarity with secure coding practices
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders
• Strong problem-solving skills and the ability to work independently as well as part of a team