Senior/Junior VAPT Consultant

Experience Required- 3+yrs

Loation :Thane

CTC offered: 8lpa (max)

Pls note :Mobile testing hands-on experience is mandetory .

SOC candidates Pls dont apply this position is for VAPT role.

-------------------------------------------

We are looking for a skilled professional to join our Information Security Team as a Application Senior Resource. This position will be responsible for Vulnerability Assessment and Penetration Testing areas into BFSI sector.

Roles & Responsibilities

------------------------

• Perform independent Quality review activities to validate quality, completeness and accuracy of security assessments delivered, including pre-closure review of significant issues and findings root cause of those issues.
• Support application team to perform application vulnerability assessments and document vulnerabilities which were found and provide recommendations for remediation according

to BFSI guidelines and industry best practices.

• Provide guidance to application team on application security best practices.
• Support remediation effort and track open issues and follow up to ensure remediation.
• Prioritizing security vulnerabilities identified during assessment and its severity, impact identification.
• Follow-up on closure of identified gaps and utilize escalation matrix effectively wherever necessary.
• Evaluate and implement new technologies while keeping in view the cybersecurity risks, technology risks and regulatory compliance;
• Keep abreast with new technologies to ensure that the organization remains at the forefront of security.
• Managing security testers and assigning security related tasks.
• Create Security Test Plans and Dashboards.

Requirements / Key Skills

--------------------------

• In-depth knowledge of security issues, exploitation techniques and remediation measures.
• Hands-on Experience in Mobile Vulnerability Assessments & Penetration Testing (Automated + Manual).
• Hands-on experience with well-known security tools BurpSuite, Nessus, Nmap, Accunetix,Metasploit, ADB,MobSF,Drozer etc.
• In-depth understanding on Common Vulnerability Exposure (CVE)/ Cert advisory database Perform in-depth analysis of VAPT results, Ability to review assessment reports to provide risk mitigation & recommendations on that basis
• Familiarity with OWASP, SANS vulnerabilities along with its validations in source code and other security frameworks & Compliance.