VAPT Consultant

Job Description – VAPT Consultant / Senior Consultant (Mumbai)Experience: Minimum 2 yearsLocation: MumbaiNotice Period: Immediate joiners preferredRole Type: Full-time – ConsultingRole OverviewWe are looking for skilled Vulnerability Assessment & Penetration Testing (VAPT) Consultants and Senior Consultants who can independently conduct security assessments across applications, networks, cloud, and infrastructure environments. The ideal candidate must have strong technical expertise, hands-on testing skills, and the ability to prepare detailed reports and remediation guidance.Key ResponsibilitiesConduct Vulnerability Assessment (VA) and Penetration Testing (PT) for:Web applicationsMobile applicationsAPIsNetwork & infrastructureCloud environmentsPerform manual and automated security testing as per industry standards (OWASP, SANS, NIST).Identify, validate, and exploit vulnerabilities in applications and systems.Prepare detailed assessment reports with clear PoCs, impact analysis, and mitigation steps.Work with development, cloud, DevOps, and infra teams to support remediation.Conduct re-testing to verify fixes and close findings.Ensure compliance with internal and client security policies.For Senior Consultant:Lead end-to-end VAPT assignmentsMentor junior team membersHandle client communication, queries, and presentationsRequired Skills & ExperienceMinimum 2 years of hands-on experience in VAPT.Strong knowledge of:OWASP Top 10Web & mobile app securityAPI security testingNetwork penetration testingCloud security basics (AWS/Azure/GCP)Hands-on with tools like Burp Suite, Nmap, Nessus, Metasploit, OWASP ZAP, Nikto, etc.Ability to identify and exploit vulnerabilities manually.Strong report-writing skills (technical + business impact).Good communication and presentation skills.Immediate joiners preferred.Good to Have (Preferred)Relevant certifications (any one preferred):OSCPOSWECEH PracticaleWPT / eWPTXeJPTExperience with secure code review.Experience working in consulting/client-facing environments