Security Consultant

Job highlights

• 5 years of penetration testing experience,preferably in highly regulated industries and for global clients . Proficiency with scripting and programming languages . Advanced problem-solving skills . OSCP certification preferred but,GPEN,GWAPT,GXPN,CREST,CESG and similar certifications a plus .

(3-5 Years)

Role Summary:

The Security Consultant will lead penetration testing engagements, assess vulnerabilities, and provide expert recommendations to improve clients security programs. This role requires advanced problem-solving skills, strong communication, and experience in handling regulated industry environments. Additionally, the consultant will mentor junior team members and contribute to research & tool development.

Mandatory Skill Sets/Expertise:

• 3-5 years of penetration testing experience, preferably in highly regulated industries and for global clients
• Proficiency with scripting and programming languages
• Advanced problem-solving skills
• OSCP certification preferred but, GPEN, GWAPT, GXPN, CREST, CESG and similar certifications a plus
• Experience with Cobalt Strike a plus
• Strong written and verbal communication skills
• Ability to work autonomously with little directional oversight.
• Ability to lead a project and multiple testers.
• Commitment to quality and on-schedule delivery; and a proven ability to establish and meet milestones and deadlines
• Customer-focused mentality to understand and appropriately respond to customers business needs.

Key Attributes:

• Excellent communication skills
• Strategic thinking and visioning
• Excellent attention to detail

Key Responsibilities:

• Perform Penetration Testing for networks (internal & external), applications, APIs & cloud assets along with Red & Purple Team assessments.
• Vulnerability identification and analysis
• Collaborate with team members and stakeholders to define project scopes, review test results, and determine remediation steps.
• Draft reports and communicate complex security concepts and test findings to clients and stakeholders.
• Make expert recommendations to help clients improve their information security program. Work on researching & developing utilities, toolkits, processes, tactics and techniques.