Centric Consulting

ROLE – Senior Consultant / Consultant

Job Location: Gurugram, Haryana

About Us

Centric Consulting is not the typical consulting company. We live our core values and bring them with us in all we do for our clients and community. Our core purpose is simple: every day we strive to provide unmatched customer and employee experiences and foster a culture of respect, diversity, and transparency. It’s this culture, our people, and delivery that come together to make Centric a trusted advisor to local businesses.

Our India business unit is guided by the goal of creating unmatched experiences for our clients, employees and community. We are committed to doing great things for clients while making a positive difference in the community because it’s where we live, work and serve. We are looking for a Senior Consultant / Consultant to join our growing VAPT team. You will be involved in the hiring strategy, execution and end-to-end recruitment for positions aligned to you. This is a great opportunity to be part of the team which is focusing on building for the future.

Job Description

The Penetration Tester is responsible for testing the security of the organization's IT systems and networks by simulating real-world attacks. This includes identifying and exploiting vulnerabilities in the organization's security controls, as well as reporting on the findings and recommending remediation steps. The Penetration Tester must have a deep understanding of security threats and vulnerabilities, as well as the latest security technologies and best practices.

Responsibilities

• Conduct Comprehensive Penetration Tests:
• Perform thorough penetration tests on web applications, network infrastructure, and mobile applications to identify and exploit vulnerabilities.
• Utilize a variety of tools and methodologies to simulate real-world cyberattacks and assess the effectiveness of existing security controls.
• Collaborate with Cross-Functional Teams:
• Work closely with development, IT, and other cross-functional teams to understand system architectures and identify potential security weaknesses. Identify and exploit vulnerabilities in the organization's IT systems and networks.
• Collaborate on security assessments and provide recommendations for improving the overall security posture.
• Social Engineering Assessments:
• Conduct social engineering tests to evaluate the organization's susceptibility to phishing attacks and other social engineering tactics.
• Provide recommendations to enhance employee awareness and mitigate social engineering risks.
• Prepare Detailed Reports:
• Generate comprehensive reports documenting identified vulnerabilities, potential exploits, and recommended remediation measures.
• Clearly communicate technical findings to both technical and non-technical stakeholders.
• Stay Current with Security Trends:
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and mitigation strategies.
• Continuously update and enhance penetration testing methodologies based on industry best practices.
• Training and Awareness:
• Provide training sessions to internal teams on security best practices and awareness.
• Contribute to the development of security policies and procedures.
• Experience with security technologies such as firewalls, intrusion detection systems, and encryption.
• Experience with security frameworks such as the CIS Controls and NIST Cybersecurity Framework.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.

Qualifications

• Bachelor’s degree in computer science, Information Security, or a related field.
• Industry-recognized certifications such as Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP)
• Proven experience in penetration testing, with a focus on web applications, network infrastructure, and mobile applications.
• Strong understanding of security principles, protocols, and best practices.
• Proficiency in using penetration testing tools and frameworks, such as Metasploit, Burp Suite, Nmap, and others.
• Excellent analytical and problem-solving skills.
• Effective communication and documentation skills.
• Web Application Penetration Experience (Certifications GWEB, eWPTX or similar)
• Experience with cloud security.
• Experience with application security.
• Experience with risk management.
• Experience with incident response.

What makes Centric different?

Special Culture – Our people make us different. We have highly talented, intelligent individuals across a broad variety of disciplines – who are eager to learn from you and share their own expertise. We embrace fresh perspectives and each other. Don’t take our word for it – check us out on Glassdoor, Facebook, Twitter or Instagram to get a glimpse inside what makes us unique.

Impact – We think of ourselves as a big company with a small company feel – a local player with global reach that combines business, technology and industry expertise.

Unmatched Experiences – We are allowed to be ourselves here. We are encouraged to be human. It’s at the root of who we are as a firm and why we’re here.

Diversity, Inclusion and Belonging – We are dedicated to creating and maintaining a culture where all people feel like they belong and are respected and valued regardless of who they are, where they are from, and what experiences they’ve had. We believe a Centric Together work environment is essential to what we do.

Innovation – We value passion, determination, perseverance, and innovation. We are inspired because we believe in what we are doing and where we are going.

Passion for the greater good – We are steadfast in our devotion to the communities we serve and in actively promoting employee involvement in community improvement projects.

The Nitty Gritty – Along with the standard insurance benefits, we offer self-managed PTO (manage your own work-life balance!), and remote working options for our employees. In fact, we wrote the book on creating a remote culture — literally.

Centric believes the best solutions come from diverse teams. We strive to have an environment where everyone has an opportunity to be successful regardless of their race, color, religion, gender, national origin, ancestry, age, special ability, military or veteran status, sexual orientation, or gender identity.

Visit us at

https://centricconsulting.com/

https://www.linkedin.com/company/centric-consulting/

https://twitter.com/centric