Sr. Consultant/Lead Consultant – Application Penetration Tester (APT)
Senior/Lead application penetration tester (Level 3) onsite in Airoli, Mumbai on a fixed-term project: runs advanced pentests on web, mobile, and enterprise apps, exploits and validates vulnerabilities, and reports findings via MIS reports to senior management. Requires 7-9 years' experience and a cert such as CEH, OSCP, LPT, or CEPT.
- Compensation
- Not disclosed
- Location
- Mumbai, India
- Work setup
- Onsite
- Seniority
- Lead
- Employment
- Contract
- Experience
- 7+ years
- Category
- Security
- Posted
Skills
Must have
- 7-9 years of experience
- At least one certification: CEH, OSCP, SANS 25, LPT, CEPT, or equivalent
- Strong technical penetration testing skills across multiple platforms
- Advanced penetration testing of web, mobile, and enterprise applications
- Hands-on experience exploiting and validating vulnerabilities across different environments
- Experience generating professional, structured reports and MIS reports for management
- Ability to clearly articulate technical vulnerabilities and business impact to stakeholders
- Good communication and presentation skills for technical and non-technical audiences
- Knowledge of OWASP Top 10, SANS 25, and other industry standards
- Immediate joiners only
Nice to have
- Up to date with latest attack vectors, tools, and exploits
- Able to guide secure coding practices and preventive measures
Full description
##
Sr. Consultant/Lead Consultant.– APTExperience: 7–9 years
Job Location: Airoli, Mumbai
Work Mode: Work From Office (WFO)
Joining: Immediate joiners only
Role Overview
We are looking for a Level 3 Application Penetration Tester (APT) with strong technical expertise in application security and penetration testing. The resource will be responsible for performing advanced penetration tests, analyzing vulnerabilities, preparing detailed MIS reports, and communicating findings to senior management and stakeholders.
This role demands both hands-on technical ability and strong communication skills to present complex vulnerabilities in a clear, structured way, while also recommending practical remediation.
Key Responsibilities
- Conduct advanced penetration testing for web, mobile, and enterprise applications.
- Perform vulnerability assessments and exploit analysis, documenting risks and mitigation strategies.
- Deliver detailed reports and dashboards, including MIS reports for senior management.
- Present findings to stakeholders and executives in a clear, business-oriented manner.
- Collaborate with application owners, developers, and infrastructure teams to remediate issues.
- Stay updated with latest attack vectors, tools, and exploits to continuously improve security testing.
- Ensure compliance with OWASP Top 10, SANS 25, and other industry standards.
- Provide guidance on secure coding practices and preventive measures.
Skills & Capabilities
- Strong technical penetration testing skills with expertise across multiple platforms.
- Ability to clearly articulate technical vulnerabilities and business impact to stakeholders.
- Proven experience generating professional, structured reports for management.
- Hands-on exposure to exploiting and validating vulnerabilities across different environments.
- Good communication and presentation skills; able to brief both technical and non-technical audiences.
Certifications (Mandatory)
Resource must hold at least one industry-leading certification in the application security testing domain: