Security Analyst
Hands-on VAPT across web applications and internal and external networks, plus configuration and policy reviews — a client-facing role for someone who can find the issue, explain it and recommend the fix.
- Location
- Pan India
- Industry
- Cyber Security
- Experience
- 3+ years
- Engagement
- Full time
What this job involves.
This is a hands-on offensive security role. You will run vulnerability assessments and penetration tests across web applications and internal and external networks, review server, firewall and end-point configurations against policy, and harden what you find.
It is also a client-facing role. You will sit in front of clients during projects, walk them through the attack surface you have reviewed, recommend safeguards and carry out cyber investigations — so clear reporting matters as much as the testing itself. The role involves travel to client sites.
What you will be doing.
- Carry out VAPT engagements across web applications and internal and external networks.
- Run configuration reviews on servers and firewalls, review policies, and harden systems, networks and end-points.
- Review the cyber-attack surface, recommend safeguards and carry out cyber investigations.
- Present findings to clients directly during projects, both in writing and verbally.
- Travel to client sites as engagements require.
The profile that fits this mandate.
- Knowledge of the OWASP Top 10 and other application or network security frameworks.
- Hands-on VAPT experience discovering and analysing application security and network security issues.
- Good experience of web application testing and internal/external network testing.
- Skills in configuration review (servers and/or firewalls), policy review, hardening of systems and networks, and end-point review.
- Hands-on expert working knowledge of tools such as Burp, Nessus, Nmap, Nipper and Metasploit, along with current tooling in the same space.
- Excellent communication and analytical skills, with good report-making — written and verbal — and the confidence to face clients directly.
- Experience of application code review and testing tools — an added advantage.
- Basic scripting knowledge in any language — an added advantage.
Send us your profile for this role.
This role is attached to your enquiry automatically — a consultant will come back to you on where your profile stands against it.
- Free for candidates — always.
- Reviewed by a consultant, not filtered by keyword matching.
- Your profile is never forwarded to a client without speaking to you first.
Not the right fit? See every current opening.
Looking for exceptional talent?
If you are on the other side of the table, tell us about the role you are hiring for and we will help you identify the right professionals.