Cyber Security Analyst

Role & responsibilities

Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for: o Web Applications o APIs (REST, SOAP, GraphQL) o Mobile Applications (iOS & Android)

• Perform manual and automated security testing using industry tools (BurpSuite Pro, OWASP ZAP, Postman, etc.).

• Identify, validate, and exploit vulnerabilities with proper risk rating and impact assessment.

• Prepare and deliver comprehensive technical reports (detailing findings, exploitation steps, and mitigation recommendations) and executive-level summaries for clients.

• Collaborate with internal teams and clients during remediation to validate fixes.

• Stay up to date with the latest vulnerabilities, exploits, attack techniques, and threat intelligence.

• Adhere to and align assessments with industry frameworks and standards such as OWASP, PTES, NIST, CIS, PCI DSS.

• Always maintain confidentiality and integrity of client data. • Vulnerability tracker management.

• Leading team onsite for overall project execution.

Required Skills & Competencies

• Web Application Penetration Testing (WAPT)

• API Security Testing (REST, SOAP, GraphQL)

• Mobile Application Security Testing (Android & iOS)

• Vulnerability Assessment and Penetration Testing (VAPT)

• Manual & Automated Security Testing

• OWASP Top 10 & API Security Top 10

• Secure Code Review (preferred)

• Vulnerability Validation & Exploitation

• Risk Assessment & CVSS Scoring

• Threat Modeling (preferred)