AppSec and Cloud Security Analyst

0 years

0 Lacs

Posted:23 hours ago| Platform: Linkedin logo

Apply

Work Mode

On-site

Job Type

Full Time

Job Description

WealthSpectrum


AppSec and Cloud Security Analyst


Role Overview:

You will conduct security testing across applications, APIs, and cloud infrastructure to identify vulnerabilities, document findings, and guide development and DevOps teams in implementing fixes.


SOC 2 Type 2 controls


Key Responsibilities:

Application & API Security

  • Conduct

    Vulnerability Assessment & Penetration Testing (VAPT)

    for web, mobile, and API components.
  • Identify security weaknesses such as authentication flaws, injection risks, and data exposure issues.
  • Validate past vulnerabilities, retest fixes, and track closure with development teams.
  • Document findings with clear remediation guidance.


Cloud Infrastructure Security

  • Perform periodic security checks on cloud environments (

    OCI / Azure / AWS

    ).
  • Identify and report misconfigurations, over-permissioned IAM roles, open ports, and insecure storage/network setups.
  • Provide actionable recommendations for environment hardening.


SOC 2 & CSCRF Support

  • Support

    WealthSpectrum’s SOC 2 Type II

    compliance through evidence preparation, control testing, and vulnerability tracking.
  • Assist our client firms in fulfilling

    Cybersecurity & Cyber Resilience Framework (CSCRF)

    requirements by providing technical assessments, documentation, and closure validation.
  • Collaborate with client IT and audit teams during VAPT reviews or third-party assessments.


Threat & Vulnerability Management

  • Maintain a centralized repository of vulnerabilities, remediation progress, and closure evidence.
  • Identify recurring patterns and recommend preventive measures to strengthen security posture.


Required Skills & Experience

  • Hands-on experience in

    application and cloud security testing

    .
  • Hands-on experience with tools like

    Burp Suite, OWASP ZAP, Postman, Nessus, Nikto

    , or equivalent.
  • Strong understanding of

    OWASP Top 10

    vulnerabilities.
  • Familiarity with

    cloud security

    practices on cloud platforms like AWS, Azure and OCI.
  • Experience in preparing detailed security reports and coordinating remediation activities.
  • Excellent communication and documentation skills, especially for audit and compliance evidence.

Mock Interview

Practice Video Interview with JobPe AI

Start DevOps Interview
cta

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

coding practice

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now

RecommendedJobs for You