Cyber Security Analyst

Role:

Experience:

Work Timing's:

Current & Preferred location:

Work Mode:

We are seeking a proactive and technically strong VAPT Analyst with 3–5 years of experience in penetration testing across applications, infrastructure, cloud, and Active Directory environments. The ideal candidate should be proficient in scripting and programming, capable of performing secure code reviews, and confident in engaging both technical and non-technical stakeholders.

Key Responsibilities:

• Perform end-to-end Vulnerability Assessment and Penetration Testing on:
• Web applications (WAPT)
• Mobile applications (Android/iOS)
• Network infrastructure (internal/external)
• Cloud environments (AWS, Azure, GCP)
• Active Directory and internal corporate networks
• Conduct secure source code reviews to identify logic flaws and vulnerabilities.
• Prepare detailed, high-quality reports with risk ratings, POC, and remediation steps.
• Communicate findings effectively to development, operations, and management teams.
• Deliver awareness sessions on secure coding, OWASP Top 10, and general security best practices.
• Maintain knowledge of current threat landscape, attack techniques, and tools.

Required Skills and Qualifications:

• 3–5 years of hands-on VAPT experience across web, mobile, network, AD, and cloud.
• Expertise in manual and automated testing methodologies.
• Proficient in the following tools and technologies:

• Burp Suite, OWASP ZAP, Nessus, Acunetix, Nmap

• Static and dynamic code analysis tools
• Strong programming and scripting skills in:

• Python, C, Bash, PowerShell

• Solid understanding of OWASP Top 10, SANS Top 25, MITRE ATT&CK, and secure coding principles.
• Ability to work independently and manage multiple assessments in parallel.
• Strong report writing and communication skills for both technical and business audiences.
• Experience in conducting secure coding and cybersecurity awareness training sessions.
• Certifications:

  CEH/eJPT/GPEN/OSCP

  (Mandatory)