- Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) on a wide range of systems, networks, and applications, spanning from SME to Enterprise level.
- Perform thorough source code reviews to identify potential security vulnerabilities and weaknesses.
- Conduct host configuration reviews to ensure systems are configured in alignment with industry best practices and security standards.
- Lead security audits and assessments to identify security gaps and recommend actionable remediation strategies.
- Provide expert security consulting, offering insights and guidance to clients on improving their overall security posture.
- Assess risks associated with identified vulnerabilities and prioritize them based on potential impact and likelihood.
- Collaborate with cross-functional teams to develop and implement risk management strategies.
- Stay current with the latest security trends, threats, and vulnerabilities to continuously enhance testing methodologies and risk assessment techniques.
- Create detailed technical reports and documentation outlining identified vulnerabilities, potential impact, risk assessment findings, and recommended remediation steps.
- Participate in client meetings to explain findings, address concerns, and provide recommendations for improving overall security and risk management practices.
Qualifications:
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
- Industry-recognized certifications such as OSCP, CREST Certified Tester (CCT), or equivalent.
- Extensive experience of at least 3-5 years in performing Vulnerability Assessment and Penetration Testing (VAPT) across diverse environments, from SME to Enterprise.
- Proven expertise in conducting source code reviews, host configuration reviews, security audits, consulting assessments, and risk management.
- Proficiency in using a variety of security testing tools and frameworks.
- Strong understanding of common security vulnerabilities, attack vectors, and mitigation strategies.
- Excellent written and verbal communication skills, with the ability to convey complex technical concepts to both technical and non-technical audiences.
- Ability to work independently, manage multiple projects simultaneously, and meet tight deadlines.
- Strong problem-solving skills and attention to detail.
- A commitment to staying up to date with the evolving cybersecurity landscape.
