We Are Hiring : Security Consultant (VAPT & Red Teaming).

CLA Indus Value Consulting is looking for a skilled Security Consultants to join our team in Mumbai.

If you have a passion for uncovering vulnerabilities and simulating real-world attacks to strengthen defences, we want to hear from you!.

Role Overview :

As a Security Consultant, you will perform comprehensive security assessments across web applications, APIs, Mobile Applications and networks.

You will play a pivotal role in delivering actionable insights and remediation strategies to our clients.

Experience : 3 5 Years.

Location : Mumbai (Onsite).

Core Focus : VAPT, Red Teaming, and Infrastructure Security.

Key Responsibilities :

- Vulnerability Assessment : Conduct VAPT on web apps, APIs, Mobile Applications and infrastructure to identify weaknesses.

- Exploitation : Perform manual and automated testing using industry-standard tools to simulate real-world attacks.

- Reporting : Analyse findings and prepare detailed reports with risk ratings, PoCs, and remediation plans.

- Collaboration : Work with internal teams and clients to prioritize and implement security fixes.

- Mentorship : Participate in knowledge-sharing and help train junior team members.

Technical Skills & Toolset :

- Web, API & Mobile Application Security : Deep expertise in OWASP Top 10 (Web & Mobile), API security risks, and secure coding practices.

- Network Security : Proficiency in scanning, enumerating, and exploiting network services and protocols.

- Red Teaming : Hands-on experience with MITRE ATT&CK TTPs, including lateral movement, persistence, and privilege escalation.

- Tools : Strong proficiency with Burp Suite, Nessus, Metasploit, Nmap, SQLmap, mobile testing tools, C2 frameworks (Cobalt Strike), and Wireshark.

Qualifications :

- Education : Bachelors or masters degree in CS, IT, or a related field.

- Certifications (mandatory) : OSCP, OSEP, OSWE, PNPT, CRTO, CRTP, CRTE, ECPPT, or CPTS.

Good to Have :

- Proven bug bounty track record, strong rankings on Hack the Box / TryHackMe, conference speaking experience, and recognition through Hall of Fame listings or security appreciations.