VAPT Principal Consultant

Provide strategic leadership and expert-level technical oversight for the organization s Vulnerability Assessment and Penetration Testing (VAPT) practice. As a senior principal consultant, you will shape methodology, drive the most complex offensive-security engagements, mentor senior staff, and act as the trusted advisor to key clients on advanced threat landscapes and remediation strategies.

Responsibilities

• Strategic Vision & Methodology Define, evolve, and champion the long-term vision, roadmap, and governance model for theVAPT service line, ensuring alignment with global best-practice frameworks (OWASP, PTES,OSSTMM, NIST ) and emerging industry standards
• Establish and continuously improve quality-assurance processes, KPIs, and service-levelagreements that guarantee consistent, world-class delivery
• Leadership of High-Impact Engagements Lead and oversee the most sophisticated penetration-testing engagements across web, mobile,network, cloud, wireless, IoT, and industrial control environments
• Architect and supervise red-team operations, adversary-emulation exercises, and full-scalebreach-and-attack simulations to evaluate organizational resilience
• Technical Excellence & Innovation Perform, review, and validate advanced exploitation techniques, vulnerability chaining,post-exploitation activities, and lateral-movement scenarios
• Drive the development and integration of proprietary tooling, automation frameworks, andthreat-modeling methodologies that keep the practice at the cutting edge
• Executive Advisory & Risk Management Serve as the senior point of contact for strategic security discussions, risk assessments, andexecutive reporting, translating technical findings into actionable business-risk insights
• Partner with client leadership to shape security roadmaps, prioritize remediation, and influencesecurity investment decisions
• Talent Development & Mentorship Mentor and coach senior and junior consultants, fostering a high-performance, collaborativeVAPT team culture
• Design and deliver advanced training programs, knowledge-sharing sessions, and certificationpathways to elevate the skill set of the practice
• Cross-Functional Collaboration Work closely with GRC, SOC, Incident Response, and Cloud Security teams to deliverintegrated, end-to-end cybersecurity solutions
• Align VAPT outputs with governance, compliance, and threat-intelligence initiatives across theorganization
• Thought Leadership & Community Engagement Stay ahead of emerging threats, tools, and techniques; publish research, whitepapers, andconference presentations that reinforce the firm s reputation as a security thought leader
• Represent the organization at industry forums, standards bodies, and client executive briefings

Desired Candidate Profile

Bachelor s degree in Cybersecurity, Computer Science, or related field. 7+ years of progressive experience in offensive security and penetration testing roles. Proven track record of leading large-scale, multi-disciplinary penetration-testing andred-team engagements for Fortune 500 or critical-infrastructure clients. Deep expertise in modern attack vectors across web, mobile, cloud, IoT, OT, andwireless environments. Strong understanding of regulatory and compliance frameworks (PCI-DSS,ISO 27001, NIST, GDPR) and ability to map technical findings to business risk. Excellent communication and influencing skills with experience presenting to C-suite and audiences.