Security Consultant - VAPT

Role Overview

We are looking for a Security Consultant VAPT with 1 - 4 years of hands-on experience in cybersecurity, penetration testing, vulnerability assessment, and application security.

The candidate will be responsible for conducting security assessments across networks, web applications, APIs, and source code, manually validating vulnerabilities, preparing professional security reports, and providing practical remediation recommendations.

Key Responsibilities

• Perform Network Vulnerability Assessment & Penetration Testing (VAPT) on servers, network devices, and infrastructure.
• Conduct Web Application Penetration Testing based on OWASP and industry-standard methodologies.
• Conduct API Security Testing for REST and other API-based applications.
• Perform manual security testing to identify vulnerabilities beyond automated scanner results.
• Conduct Secure Code Review / Source Code Review to identify security weaknesses.
• Validate vulnerabilities, assess their technical and business impact, and eliminate false positives.
• Prepare professional VAPT reports containing technical details, evidence, risk ratings, and remediation recommendations.
• Perform revalidation testing after remediation.
• Work with development and infrastructure teams to explain vulnerabilities and support remediation.
• Stay updated with emerging vulnerabilities, attack techniques, security tools, and penetration-testing methodologies

Required Skills

• 1 - 4 years of hands-on experience in Cybersecurity / Penetration Testing / VAPT.
• Strong understanding of Network VAPT and Web Application Security.
• Good knowledge of OWASP Top 10 and common application vulnerabilities.
• Hands-on experience with security tools such as:

1. Burp Suite
2. Nmap
3. Nessus
4. Metasploit
5. Kali Linux Similar VAPT and security-testing tools.
6. Understanding of, Authentication, Authorization. Session Management, REST APIs, HTTP/HTTPS and Common Network Protocols.
7. Basic to intermediate experience with Source Code Review / SAST.
8. Ability to manually validate and exploit security vulnerabilities in authorized testing environments.
9. Good understanding of vulnerability severity, risk assessment, and remediation approaches.
10. Strong technical documentation and security report-writing skills.
11. Added Advantage - Blockchain Security

Experience or knowledge of Blockchain Security / Web3 Security will be an added advantage :

• Blockchain node and infrastructure security
• Smart contract security testing
• Web3 application security
• Solidity security review
• Common blockchain and smart contract vulnerabilities

Relevant certifications are advantageous but not mandatory, including:

OSCP

CEH

eJPT

PNPT

Security+

Other relevant cybersecurity certifications

Who We're Looking For

We are looking for a technically curious security professional who enjoys hands-on security testing and penetration testing, can identify vulnerabilities beyond automated scanner output, understands vulnerability validation and real-world security impact, has good analytical and problem-solving skills, can communicate technical findings clearly, is interested in building deeper expertise in offensive security and emerging security technologies, is comfortable working in an on-site consulting environment.

Work Location - Noida - On Site Role

Experience - 1-4 years