Senior Security Consultant
- Posted a month ago
- Be among the first 40 applicants
Job Description
Experience:
- 5+ years of hands-on experience in Application Security, Vulnerability Research, Penetration Testing, Product Security, or Secure Software Engineering.
- Proven experience in Open Source Software (OSS) Security Assessment and Vulnerability Analysis.
Key Responsibilities
Vulnerability Analysis & Validation
- Analyze and investigate security findings generated by automated vulnerability scanners.
- Differentiate genuine vulnerabilities from false positives, informational findings, and AI-generated hallucinations.
- Perform root cause analysis of identified vulnerabilities.
- Validate exploitability and business impact of reported issues.
Threat Modeling & Security Assessment
- Develop project-level threat models for OSS repositories.
- Identify attack surfaces, trust boundaries, and security risks.
- Evaluate security implications within the broader application ecosystem.
- Apply risk-based security evaluation methodologies.
- Document triage decisions and vulnerability classifications.
- Contribute to the creation of golden datasets for AI model training and benchmarking.
- Provide feedback to improve automated vulnerability detection systems.
Skills
Strong code review and debugging capabilities in:
- C/C++
- Go
- Java
- Python
Additional scripting capability in Bash or equivalent preferred.
More Info
Key Skills
About Company
RIDIK, a subsidiary of CLPS Inc, is part of a global leading information technology consulting and solutions service provider focusing on the banking, insurance, and financial service sectors.
As a wholly-owned subsidiary of CLPS Incorporation (Nasdaq: CLPS), we leverage global resources to deliver innovative, tailored solutions across Asia Pacific, North America, and the Middle East.
We have more than 3000 employees working across 8 countries and 8 development centres. Our development centres have been certified with ISO 9001, 27001, and CMMi L5. For more information: please visit: https://www.clpsglobal.com/.
Skills:
identity and access management (IAM), cloud security, Data Protection, Application Security, Security Controls, Risk Assessment, AI-powered security tools, secure AI system deployments, security consultancy, security design patterns, security automation workflows, Security Architecture, threat modelling, cybersecurity risk assessments, machine learning security risks, security architecture reviews, compliance frameworks, AI security governance
Skills:
Endpoint Security, cloud security, network security, Data Protection, Cryptography, Identity And Access Management, Application Security, AI security concepts, Risk Assessment, security compliance frameworks, Security Architecture, threat modelling
Skills:
vulnerability research , product security , threat modeling , Application Security, Penetration Testing, Open Source Software, OSS, Threat Analysis, Vulnerability Detection, Vulnerability Analysis, Security Assessment, security risks, Root Cause Analysis
Skills:
red teaming , Operating Systems, Network Protocols, Vapt, Owasp Top 10, automation, Penetration Testing, offensive security tools, custom scripting, Active Directory, offensive security, CWE, web application architectures, vulnerabilities, attack techniques
Skills:
vulnerability research , Kali Linux, Burp Suite, Metasploit, Nmap, Penetration Testing Methodologies, Bypassing advanced security defenses, Exploit development, OSCP certification, System application security risks and mitigation strategies