Senior Security Analyst

Job Title: Senior Security Analyst

Location - Hyderabad & Bangalore

Position Summary:

Softcell Global Technologies Pvt. Ltd. is seeking a highly skilled Senior Security Analyst with strong offensive security capabilities across the Web, Network, Mobile, Active Directory, OT environments and at least 4-5 years of experience in vulnerability assessment, penetration testing and code review. The ideal candidate must demonstrate proven hands-on experience, leadership ability, and excellent communication skills to manage project delivery, lead a technical team, and coordinate directly with enterprise clients. Practical skills are mandatory, and all shortlisted candidates will undergo a practical assessment.

Key Responsibilities :

• Conduct in-depth penetration tests on web apps, APIs, networks, cloud, and OT environments.
• Execute internal infrastructure and Active Directory exploitation using BloodHound, CrackMapExec, Impacket, etc.
• Perform OT/ICS/SCADA security testing, including assessments of protocols and firmware.
• Conduct comprehensive manual reviews to identify security flaws, insecure patterns, and logical vulnerabilities – SAST and DAST.
• Chain vulnerabilities to simulate end-to-end real-world attack scenarios and provide POCs.
• Team Leadership & Client Coordination
• Lead and mentor junior security analysts during engagements.
• Act as the technical lead for VAPT projects, ensuring timely delivery and quality assurance.
• Interface directly with clients to understand requirements, present findings, and suggest remediation strategies.
• Manage testing schedules, reporting timelines, and escalation workflows.
• Draft detailed vulnerability reports with actionable remediation.

Mandatory Requirements

• 4–5 years of hands-on experience in penetration testing and red teaming.
• Strong grasp of OWASP Top 10, MITRE ATT&CK, and real-world threat simulation.
• Expertise in AD security, internal lateral movement, and domain privilege escalation.
• Familiarity with OT security controls, risk frameworks (NIST, IEC 62443), and protocol fuzzing.
• Scripting proficiency in Python, PowerShell, or Bash.
• Exposure to tools like Nmap, Wireshark, Burp Suite, Metasploit, BloodHound, SonarQube, Checkmarx, etc
• Leadership experience in managing client-facing pentest projects.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Excellent communication, documentation, and collaboration skills.

Additional Details

• Immediate Joiners Preferred
• Practical Skills are a Must
• Location: Hyderabad and Bangalore (Onsite Only)
• Bonus points for published CVEs, bug bounty recognition, open-source security tools, research contributions, or participation in industry events, workshops, and communities.

Preferred Certifications

OSCP – Offensive Security Certified Professional

OSWE – Offensive Security Web Expert

CRTP – Certified Red Team Professional

CRTE – Certified Red Team Expert

CPENT – Certified Penetration Testing Professional

CEH – Certified Ethical Hacker

eJPT, eCPTX, CBBH, PNPT– or equivalent certifications in advanced adversarial simulation.