Infrastructure Security Consultant

Experience: 1+ years

Key responsibilities:

Application Security

• Perform security assessments of web, API, mobile and thick-client applications basis on defined duration.
• Run authenticated and unauthenticated DAST scans on UAT and production, and publish results into a tracker
• Raise and update service requests (RITM) and tickets for assessments, access and findings.
• Review and validate reports from external security vendors, remove false positives, and share actionable findings with application teams.
• Track remediation to closure: retest fixes in UAT, confirm promotion to production, and report final status.
• Maintain the vulnerability tracker by criticality and update it on a regular schedule.
• Coordinate with the manager on issues, application approvals and status updates.
• Follow the client's rules of engagement and testing norms during every assessment.
• Deliver all work within the defined SLAs.
• Ensure the defined SLA is maintained for each application and identified finding, monitor SLA timelines for timely closure, and update the respective tracker and RITM with the required details in case of any SLA breach.

VA/CA

• Perform vulnerability assessments (VA) and configuration audits (CA) on in-scope infrastructure.
• Run weekly scans on the enterprise vulnerability management platform and prepare the report accordingly.
• Review and validate scan results, eliminate false positives, and prioritise findings by risk.
• Provide technical justification for reported issues when asked by asset owners or auditors.
• Raise and update service requests (RITM) wherever it is applicable.
• Coordinate with the manager on issues, approvals and status updates.
• Follow the client's rules of engagement and testing norms during every assessment.
• Deliver all work within the defined SLAs.
• Verify the relevant RITMs, update the finding status based on the latest assessment/remediation status, and use VLOOKUP to efficiently validate and match finding-related data across trackers.
• Have a good knowledge of Microsoft Excel and Tenable Nessus Security Centre.

Qualifications:

o 0-1 year of hands-on experience in VAPT, Application Security, Offensive Security, or related cybersecurity domains. Internship, freelance, bug bounty, research, or lab-based experience will be considered valuable.

o Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related field.

Pay: ₹400,000.00 - ₹450,000.00 per year

Application Question(s):

• Are you currently pursuing or have you completed a Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field?
• Have you performed Web Application Security Testing as part of a project, lab, internship, or self-learning exercise?
• Have you worked with ServiceNow RITMs/tickets for security assessments or vulnerability findings?
• What is your current CTC and expected CTC?
• Are you based in Ahmedabad or willing to relocate to Ahmedabad?
• How many years of hands-on experience do you have in Vulnerability Assessment (VA)?
• Do you have hands-on experience in Configuration Audit/Assessment (CA)?
• Have you worked on Tenable Nessus Security Center/Tenable.sc? If yes, please mention your experience.
• Which vulnerability assessment tools have you worked with?
• Have you performed authenticated and unauthenticated vulnerability scans?
• Have you worked on vulnerability remediation tracking and retesting findings after remediation?
• Have you performed configuration audits/security hardening checks on Windows, Linux, network devices, or other infrastructure? Please specify.

Work Location: In person