Security Consultant II

About the role

Security Consultant owning VAPT and Red Teaming engagements across infrastructure, network, web, mobile, API, thick-client, cloud and AI/LLM environments. The role involves identifying and exploiting security weaknesses, simulating real-world adversary techniques, developing proof-of-concept exploits, documenting findings and providing clear remediation guidance to technical and business stakeholders.

What you'll do

• Perform Vulnerability Assessment and Penetration Testing across infrastructure, network, web, mobile (Android/iOS), API
• Identify, validate and document vulnerabilities using manual testing techniques and automated security tools; develop PoCs to demonstrate exploitability
• Conduct database security testing and configuration reviews across MySQL, Oracle and NoSQL platforms
• Plan, execute and document Red Team engagements simulating real-world threat actor TTPs mapped to MITRE ATT&CK
• Execute attack chains covering initial access, lateral movement, privilege escalation and data exfiltration

What you need

• 3–6 yrs of experience
• Vulnerability assessment
• Penetration testing
• Linux
• OWASP
• Python
• AWS
• MCA or B.Tech or B.E.

Good to have

• GCP
• Azure
• TCP/IP
• Bash
• PowerShell
• LLMs