Security Consultant - API Penetration Testing

abold text-[#3265fe] uppercase tracking-wider">About the Role

We are looking for a Security Consultant / Penetration Tester with strong experience in API Security and a Red Teaming background. The ideal candidate should have hands-on experience identifying, exploiting, and reporting security vulnerabilities across APIs and application environments, with an attacker mindset and strong understanding of offensive security techniques.

Responsibilities

• Conduct API, Web, Mobile, and Thick Client Penetration Testing.
• Perform Red Teaming, attack simulations, and security assessments.
• Identify and exploit vulnerabilities across applications, APIs, networks, and enterprise environments.
• Conduct Active Directory assessments, post-exploitation, and privilege escalation activities.
• Develop and execute penetration testing plans and methodologies.
• Prepare detailed technical reports with findings, risk ratings, and remediation recommendations.
• Work closely with internal teams and clients to communicate findings and strengthen their security posture.
• Stay updated with the latest vulnerabilities, attack techniques, tools, and offensive security methodologies.

Requirements

• 1-3 years of hands-on experience in Penetration Testing, preferably with a Red Teaming background.
• Strong experience in API and Web Application Penetration Testing.
• Good knowledge of Active Directory attacks, exploitation, privilege escalation, and post-exploitation.
• Hands-on experience with tools such as Burp Suite, Postman, OWASP ZAP, Nmap, Metasploit, or similar.
• Strong understanding of common attack frameworks, methodologies, and security tools.
• Experience with Red Team engagements and attack simulations will be highly preferred.
• Strong technical documentation, reporting, and client communication skills.
• OSCP, CRTO, PNPT, CRTP, eCPPT, or similar certifications will be an added advantage.
• Willingness to work onsite in Mumbai

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.