Senior Security Consultant

• Senior Security Consultant
• Company: Eventus Security
• Job Location: New Delhi, Delhi, India
• Employment Type: Full-time
• Experience Required: 5+ years

We are looking for a highly skilled Senior Security Consultant with 5+yrs in Vulnerability Assessment and Penetration Testing (VA/PT) across web applications, infrastructure, cloud environments, and Active Directory. The ideal candidate will have hands-on experience in exploiting security vulnerabilities, conducting secure code reviews, and performing threat modeling to enhance cybersecurity resilience.

• Requirements
• Network & Infrastructure Security Testing
• Perform network traffic analysis to assess security risks in TCP/IP, routing, and switching.
• Conduct port and service enumeration to identify attack surfaces.
• Execute infrastructure penetration testing on identified services.
• Web & Application Penetration Testing
• Identify and exploit OWASP Top 10 vulnerabilities in web applications.
• Assess SANS Top 25 vulnerabilities in application security.
• Perform business logic testing to uncover logical flaws in applications.
• Conduct penetration testing for Web, Mobile, API, and Thick Client applications.
• Cloud & Active Directory Security Testing
• Perform Active Directory penetration testing to uncover misconfiguration and privilege escalation paths.
• Conduct cloud security penetration testing across AWS, Azure, and GCP.Review CIS Benchmark & NIST-based configurations for security gaps.
• Exploitation & Secure Code Review
• Perform manual and automated exploitation of vulnerabilities.
• Conduct source code reviews for Java, .NET, Python, ReactJS, Kotlin, and Ionic.
• Threat Modeling & Reporting
• Develop Threat Models to assess security risks proactively.
• Deliver detailed security reports with exploit demonstrations and mitigation strategies.
• Tools & Certifications
• Hands-on experience with Burp Suite, SQLmap, Nessus, OpenVAS, and other VA/PT tools.
• Recommended certifications: CEH, eJPT, OSCP, eCPPT. .