Sr. Consultant/Lead Consultant – Application Penetration Tester (APT)

Sr. Consultant/Lead Consultant.– APT

Experience: 7–9 years

Job Location: Airoli, Mumbai

Work Mode: Work From Office (WFO)

Joining: Immediate joiners only

We are looking for a Level 3 Application Penetration Tester (APT) with strong technical expertise in application security and penetration testing. The resource will be responsible for performing advanced penetration tests, analyzing vulnerabilities, preparing detailed MIS reports, and communicating findings to senior management and stakeholders.

This role demands both hands-on technical ability and strong communication skills to present complex vulnerabilities in a clear, structured way, while also recommending practical remediation.

• Conduct advanced penetration testing for web, mobile, and enterprise applications.
  

• Perform vulnerability assessments and exploit analysis, documenting risks and mitigation strategies.
  

• Deliver detailed reports and dashboards, including MIS reports for senior management.
  

• Present findings to stakeholders and executives in a clear, business-oriented manner.
  

• Collaborate with application owners, developers, and infrastructure teams to remediate issues.
  

• Stay updated with latest attack vectors, tools, and exploits to continuously improve security testing.
  

• Ensure compliance with OWASP Top 10, SANS 25, and other industry standards.
  

• Provide guidance on secure coding practices and preventive measures.
  

• Strong technical penetration testing skills with expertise across multiple platforms.
  

• Ability to clearly articulate technical vulnerabilities and business impact to stakeholders.
  

• Proven experience generating professional, structured reports for management.
  

• Hands-on exposure to exploiting and validating vulnerabilities across different environments.
  

• Good communication and presentation skills; able to brief both technical and non-technical audiences.
  

Resource must hold at least one industry-leading certification in the application security testing domain:

• CEH (Certified Ethical Hacker)
  

• OSCP (Offensive Security Certified Professional)
  

• SANS 25
  

• LPT (Licensed Penetration Tester)
  

• CEPT (Certified Expert Penetration Tester)
  

• Or equivalent recognized certification.
  

• Opportunity to work on mission-critical application security projects.
  

• Direct visibility with senior management through MIS and stakeholder reporting.
  

• Collaborative environment with exposure to cutting-edge security tools and practices.
  

• Competitive monthly compensation and fixed-term project role onsite in Mumbai.