Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2285 days ago

Security Consultant

Payatu10 open roles

Where
Pune, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity ConsultantPayatu · Pune, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Payatu's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 2285 days ago

The posting

Payatu is hiring an Application Security Consultant who's genuinely good at breaking things by hand, not someone who lets a scanner do the thinking.

Who we are?

We are a service-based cybersecurity company, and pentesting is what we do all day, every day, across Web Apps, Mobile Apps, and Thick Clients. Our reputation is built on catching what automated scanners walk right past: business logic flaws and the application-specific bugs that only show up when someone sits down and thinks like an attacker instead of running through a checklist.

What we look for outside work parameters?

Your expertise is your primary qualification, not your degree or certification.

Your publicly known contributions are your credentials.

Papers you have written, tools you have developed are your references.

Your write-up reflects your interests and ethics.

Your published exploits, your CTF scores, and hall of fame listings are the testimonies of your work.

Your research paper was published and presented at conferences.

You are learning from the community and enthusiastically contributing back.

Certifications like OSCP, CREST, OSWE, and similar are a plus if you’ve got them, but we don’t gatekeep on degrees or certifications.

Bonus points for AI security skills, on either side of the fence - attacking AI systems or building smart automation around your own testing.

You are a perfect technical fit if:

2-5 years of hands-on Web Application pentesting experience (mobile and thick client experience is a strong plus).

Strong fundamental of application and network protocols.

Stronghold on Web application security concept and penetration testing skill.

Good command of at least one programming language.

Good understanding of OWASP Top 10 and other web-related vulnerabilities as well as logic flaws.

Hands-on experience in performing penetration testing of web-based applications preferably in the financial domain.

Good to have experience in working alongside the development/QA teams.

Good report writing and presentation skills.

Should be able to suggest optimum security improvements to application components.

Burp MCP is baked into our workflow, as part of your day-to-day testing.

Source Code and Config Review experience is a plus for engagements that go beyond Black-Box.

The instinct to poke at things until they break, and the patience to document exactly how.

You Have All Our Desired Qualities, if:

Experience in web application and web service security assessment.

You have a history of publishing or presenting good research.

You have the knack of finding security bugs in everything you touch.

You like automating stuff.

You like writing tools.

You have excellent written and verbal communication skills and the ability to express your thoughts clearly. You have the skill to articulate and present technical things in business language.

You can work independently as well as within a team and meet project schedules and deadlines.

You have strong problem solving, troubleshooting, and analysis skills.

You are passionate about your area of expertise and self-driven.

You are comfortable working in a dynamic and fast-paced work environment.

You are self-driven, proactive, hardworking, team-player.

You are working on something on your own in your field apart from official work.

Your everyday work will look like:

Manual penetration testing of Web Applications, Mobile Applications, and Thick Clients (automation is a starting point here, not the finish line).

Finding the business logic flaws and app-specific bugs that only show up when a human actually tries to break the app.

Security assessment of web application and web service on various platforms.

Back your findings with Proof-of-concept exploits.

Collect evidence and maintain a detailed write-up of the findings.

Understand and explain the results with impact on business and compliance status.

Explain and demonstrate vulnerabilities to application/system owners.

Provide appropriate remediation and mitigations of the identified vulnerabilities.

Individually or collaboratively review the system designs, source code, configurations, communications for security gaps.

Deliver results within stipulated timelines.

Sharpen your saw with continuous research, learning, training on the latest tools and techniques, keeping up with new research, and sharing the same with the ecosystem.

Communicate well using verbal and written skills, within and out of the team.

Reports detailed enough for a developer to fix it, clear enough for a stakeholder to get why it matters. Using automation and AI to work more efficiently, whether that means building tooling to speed up repetitive parts of testing or using AI to sharpen your workflow, all in service of delivering higher-quality work, not cutting corners on it.

Roughly 30% of your time is set aside for research. You choose the topic, and it’s treated as a real part of the job, not something squeezed in on the side.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Payatu's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Payatu's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Payatu's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.