Analyst III - Information Security

3 - 5 Years
1 Opening
Trivandrum

Role Proficiency:

With strong knowledge and competence independently carry out the assigned tasks with minimal support from the supervisors. Handle the internal audits to ensure the compliance requirements of various applicable standards and more independently handle VAPT/Red Teaming assignments and involve in customer discussions to identify requirements. (Minimum Supervision)

Outcomes:

Measures of Outcomes:

Outputs Expected:

Documentation:

Process:

Monitoring:

Training or certifications:

Skill Examples:

Knowledge Examples:

• Should have a strong understanding of concepts of Information Security Business Continuity Data Privacy VAPT Red Teaming and various compliance standards.
  • Knowledge on ISO and other Compliance standards efficient to evaluate the security controls.

  • Knowledge on ISO 22301/27001/9001/27701 Risk Management incident management awareness activities customer assurance etc.

  • Knowledge on standard SDLC and project management life cycles.

  • Knowledge on the operations of various functional units like HR REFM IT Finance etc. and units involved in IT Asset lifecycle management.

  • Expert on security testing standards like OWASP Top

  • Expert on Linux commands.

  • Expert on Scripting Languages like Shell Script Python etc.

  • Development and Testing knowledge would an added advantage.

  • Hands on experience in RSA Archer Burp Suite Nessus Nmap Postman Genymotion MobSF Drozer etc.

  • Good to have Certifications like ISO 27001/22301/9001/27701 Lead Auditor/Implementor CEH (MASTER) ECSA CASE OSWP etc.
  
  
  Additional Comments:

  Job Title Junior Security Analyst (Network, Cloud & Red Team) Location India Role Summary We are seeking a Junior Security Analyst with 0–1 years of experience to actively contribute to the security of enterprise infrastructure and cloud platforms. The role involves executing assigned penetration testing tasks, supporting adversary simulation exercises, and delivering actionable findings to improve detection and response capabilities. Active research and contributions to the security community through conference talks, open-source projects, or published work will be highly valued. Key Responsibilities Infrastructure & Network Security • Perform basic penetration testing and security reviews of enterprise networks, servers, and supporting infrastructure under supervision. • Identify and report configuration issues, segmentation gaps, and firewall rule weaknesses. • Execute assigned tasks using tools such as Nmap, Nessus, and Burp Suite. Cloud Security • Assess AWS, Azure, and GCP environments for common security misconfigurations. • Document and communicate findings for remediation. • Benchmark environments against CIS, NIST, and cloud provider security guidance. Offensive Security Techniques • Execute adversary simulation scenarios to test detection and response. • Operate red team tools (e.g., Cobalt Strike, BloodHound) for assigned attack paths such as privilege escalation and lateral movement. • Provide evidence of defensive strengths and weaknesses through structured reporting. Reporting & Advisory • Produce clear technical reports and summaries of findings. • Communicate actionable remediation steps to engineering and security teams. • Collaborate with blue and purple teams to validate detection and response improvements. Key Requirements Technical Expertise • Basic understanding of networking, operating systems, and cloud platforms. • Familiarity with at least one scripting language (Python, PowerShell, or Bash) is a plus. • Ability to operate security tools and follow testing methodologies. • Knowledge of frameworks such as MITRE ATT&CK, OWASP, and CIS Benchmarks is a plus. Experience & Capabilities • 0–1 years of practical cybersecurity experience (internships, projects, or coursework count). • Ability to deliver assigned tasks on time and with attention to detail. • Strong written and verbal communication skills. Certifications preferred: Entry-level certifications such as CompTIA Security+, AWS Cloud Practitioner, or similar are a plus but not required. What You Will Drive • Direct execution of penetration testing and adversary simulation tasks. • Delivery of actionable findings and remediation recommendations. • Measurable improvements in enterprise and cloud security posture.

Pen Testing,Cyber Security,Vulnerability Assessment