Senior Security Consultant

We are looking for an experienced Senior Security Consultant with deep technical expertise in Web, API, Mobile and Thick Client Security Assessments. The role involves leading end-to-end security assessments, mentoring junior consultants, and engaging directly with clients to deliver robust, high-quality security solutions.

Who we are?

Payatu is an ISO certified company where we strive to create a culture of excellence, growth and innovation that empowers our employees to reach new heights in their careers. We are young and passionate folks driven by the power of the latest and innovative technologies in IoT, AI/ML, Blockchain, and many other advanced technologies. We are on the mission of making Cyberworld safe for every organization, product, and individual.

What we look for outside work parameters?

Your expertise is your primary qualification, not your degree or certification.
Strong leadership qualities, plan, monitor and manage activities for self and team.
Passion to deliver the promised service.
Motivated, self-starter individual with high level of integrity, intensity, and activity with a can-do attitude.
Ability to understand Organization objectives and execute them accordingly.
Disciplined process-oriented work style and ability to work independently.

Your research paper was published and presented at conferences.

You are learning from the community and enthusiastically contributing back.

You are a perfect technical fit if:

Security researcher mindset with hands-on expertise in leveraging penetration testing tools (Burp Suite, Metasploit, Kali Linux, etc.) to identify complex vulnerabilities and develop innovative attack techniques. Strong knowledge of application security principles, including OWASP testing guidelines and secure coding practices, and security vulnerabilities.

Understanding of product security practices and secure software development life cycles.

Effectively leverage AI-powered tools and automated scripts to enhance day-to-day security activities.

Stay current with emerging attack techniques, security research, AI security trends, and the evolving threat landscape through continuous learning and hands-on experimentation.

Exceptional written and verbal communication skills, with the ability to present technical findings, business impact, and risk-based remediation recommendations to audiences ranging from developers, security engineers, product managers to C-level executives.

Your everyday work will look like:

Lead application security assessments including web, mobile, and thick client applications.

Perform Secure Code Reviews (manual and automated) across multiple programming languages and frameworks.

Conduct vulnerability assessments, penetration testing, and configuration reviews for applications, networks, and cloud environments.

Identify, validate, and document vulnerabilities with detailed remediation guidance.

Develop and enhance internal testing methodologies, scripts, and frameworks for security assessments.

Collaborate with red team, application security, and dev teams during remediation and retests.
Review and design security architectures, ensuring alignment with standards (OWASP, NIST, ISO, CIS, CERT-In etc.).

Support clients with remediation planning, security awareness, and incident response guidance.

Contribute to pre-sales and proposal development by scoping technical requirements and security service offerings.

Mentor and guide junior consultants in performing security assessments and documentation.

You Have All Our Desired Qualities, if:

Minimum 5+ years of hands-on experience in penetration testing, security research, or related fields.

Proven track record in performing complex security assessments on software applications and at least one of the cloud environments (AWS, Azure, GCP).

Strong experience with reverse engineering (static and dynamic analysis) of software and binaries.

Expertise in threat modeling, risk assessment, and security design for software products.

Extensive experience in vulnerability analysis and exploitation techniques across diverse platforms.
Familiarity with SDLC, DevSecOps, MLSecOps and threat modeling.

Excellent report writing and client communication skills.

Certifications:

Relevant certifications such as OSWE, OSCP, AWAE, eWAPT, eMAPT, GWAPT, BSCP or CISSP/CISM.

Additional certifications or training in cloud security, reverse engineering, or product security are a plus.
Experience with automation frameworks for repetitive testing tasks.