Skip to content

Open nowPosted 17 days ago

Security Consulting Manager – Infrastructure & Application Security

Talakunchi Networks21 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Consulting Manager – Infrastructure & Application SecurityTalakunchi Networks
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Talakunchi Networks's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 17 days ago

The posting

Experience: 8+ Years

Employment Type: Full-Time

Location: Mumbai

Employment Type: Full-Time

Role Overview

We are seeking an experienced and results-driven Security Consulting Manager to lead and manage cybersecurity consulting engagements across Infrastructure Security and Application Security.

The role will be responsible for managing a team of security consultants, overseeing end-to-end security assessment projects, managing client relationships, and ensuring the successful delivery of security engagements within defined scope, timelines, SLAs, and quality standards.

The ideal candidate should have strong experience in Infrastructure VA/PT, Web Application Penetration Testing, API Security, Mobile Application Security, vulnerability management, client governance, and security project delivery. The candidate should also be capable of translating complex technical security findings into business risks and actionable recommendations for senior management and CISO-level stakeholders.

Key Responsibilities

1. Team Leadership & Management

  • Lead and manage a team of 15+ security consultants across Infrastructure Security and Application Security engagements.
  • Plan and allocate resources based on project requirements, skill sets, workload, and delivery timelines.
  • Provide technical and professional guidance to security consultants.
  • Mentor team members and ensure adherence to defined security methodologies, quality standards, and industry best practices.
  • Monitor team performance, utilization, productivity, and delivery commitments.

2. Security Project Management

  • Manage end-to-end security projects, including planning, resource allocation, scheduling, execution, reporting, remediation tracking, retesting, and closure.
  • Coordinate Infrastructure VA/PT, Web Application Penetration Testing, API Security Assessments, Mobile Application Penetration Testing, and other security assessment engagements.
  • Ensure projects are delivered within defined scope, timelines, SLAs, assessment calendars, and quality standards.
  • Monitor project deliverables, dependencies, risks, issues, resource utilization, and escalations.
  • Manage project-level change requests and ensure appropriate stakeholder communication.

3. Client & Stakeholder Management

  • Act as the primary point of contact for clients, application owners, infrastructure teams, project stakeholders, senior management, and CISOs.
  • Conduct regular governance and review meetings with clients and internal stakeholders.
  • Provide updates on project progress, security posture, critical vulnerabilities, remediation status, risks, and upcoming activities.
  • Build and maintain strong relationships with key client stakeholders.
  • Translate technical security findings into business-level risks and actionable recommendations for management.

4. Vulnerability Management

  • Manage the complete vulnerability lifecycle from identification and risk prioritization through remediation, validation, retesting, and closure.
  • Track critical and high-risk vulnerabilities and drive timely remediation with relevant technical and business teams.
  • Review and validate risk acceptance or deviation requests where vulnerabilities cannot be remediated due to technical, business, or operational constraints.
  • Monitor vulnerability ageing, remediation trends, closure rates, and overall security posture.

5. Quality & Security Assessment Review

  • Review security assessment reports for technical accuracy, risk classification, completeness, and quality.
  • Ensure findings are supported with appropriate evidence and actionable remediation recommendations.
  • Ensure security assessments follow defined methodologies, standards, and internal quality guidelines.
  • Support continuous improvement of assessment methodologies, reporting standards, and delivery processes.

6. Security Governance & Reporting

  • Maintain vulnerability dashboards and management MIS covering:Open vulnerabilities Critical and high-risk findings Vulnerability ageing Remediation status Closure trends Project performance
  • Prepare and present monthly and quarterly security reports, management dashboards, KRIs, project status reports, and executive presentations.
  • Conduct periodic governance reviews with stakeholders to assess security posture, project progress, risks, and remediation performance.

7. Risk, Issue & Escalation Management

  • Identify, assess, and manage project risks, issues, dependencies, and escalations.
  • Coordinate with technical and business teams to ensure timely resolution of critical security issues.
  • Escalate significant security risks and delivery concerns to senior management where required.
  • Ensure appropriate communication and visibility of project risks throughout the engagement lifecycle.

8. Continuous Improvement

  • Identify opportunities to improve security assessment processes, delivery methodologies, reporting, and client engagement.
  • Drive initiatives to improve operational efficiency, assessment quality, and resource utilization.
  • Encourage automation and standardization across security consulting activities.
  • Participate in post-engagement reviews and implement lessons learned across future projects.

Required Qualifications & Skills

  • Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  • 8+ years of experience in Cybersecurity, Security Consulting, VAPT, Application Security, Infrastructure Security, or a related domain.
  • Proven experience managing and leading cybersecurity teams.
  • Experience managing teams of 15+ security consultants is preferred.
  • Strong hands-on understanding of:Infrastructure VA/PT Web Application Penetration Testing API Security Assessment Mobile Application Security Testing Vulnerability Management Security Risk Management
  • Strong project management and stakeholder management skills.
  • Experience working directly with enterprise clients and senior stakeholders/CISOs.
  • Strong understanding of vulnerability risk ratings, remediation processes, retesting, and risk acceptance.
  • Excellent report review and presentation skills.
  • Strong analytical, communication, negotiation, and problem-solving abilities.

Preferred Certifications

One or more of the following certifications will be an advantage:

  • CISSP
  • CISM
  • OSCP
  • OSWE
  • CEH
  • CREST certifications
  • PMP / PRINCE2
  • Other relevant cybersecurity or project management certifications

Key Competencies

  • Strategic leadership
  • Team management and mentoring
  • Client relationship management
  • Security project management
  • Risk and vulnerability management
  • Stakeholder communication
  • Governance and reporting
  • Problem-solving and decision-making
  • Strong business and security acumen
  • Ability to manage multiple projects and priorities simultaneously

What We Offer

  • Opportunity to lead large-scale cybersecurity consulting engagements.
  • Exposure to enterprise clients and CISO-level stakeholders.
  • Leadership responsibility across Infrastructure and Application Security teams.
  • Opportunity to work across diverse security assessment programs and technologies.
  • Professional growth and leadership development opportunities.
  • Collaborative and security-focused work environment
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Talakunchi Networks's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Talakunchi Networks's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Talakunchi Networks's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.