Walk-in || VAPT - Consultant / AM

Role & responsibilities

• Total 2-7 years of experience in Cyber security domain
• Understanding of basic business and information technology management processes.
• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Experience of

  Web Application Security Testing, Infrastructure VAPT, API testing

  .
• Knowledge of

  AI/LLM

  penetration testing for

  Generative AI

  applications, AI-powered chatbots, and

  LLM-integrated solutions

  .
• Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
• Experience in security testing of

  RAG (Retrieval-Augmented Generation)

  applications, AI guardrails, model access controls, and AI application integrations.
• Experience on

  Mobile Security Pen-Testing (iOS and Android)

  .
• Experience on

  Cloud (AWS & Azure) Configuration

  and

  Red Teaming

  .
• Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.
• Experience in conducting

  Firewall and Network Devices Configuration Review

  and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CRTA / CRTP
• OSWE (Offensive Security Web Expert)
• GWAPT (GIAC Web Application Penetration Tester)
• eWPT / eWPTX
• PNPT
• CREST Certifications
• eJPT
• CISSP (Preferred for leadership positions)
• CEH