Cybersecurity Associate

Location: Kolkata, Onsite

Experience: 1–3 years

About the Role: We are looking for a Cybersecurity Associate to help secure Hiyaku Systems [new entity of Kofuku Technologies], an anonymous social platform focused on health information and community interaction. You'll work hands-on across our web application, REST APIs, GraphQL APIs, authentication, authorization, and business logic, identifying vulnerabilities and helping the engineering team fix and prevent them.

Key Responsibilities:

• Perform manual and automated Web & API VAPT.
• Identify vulnerabilities across OWASP Top 10 and API Security.
• Test IDOR/BOLA, authentication, authorization, privilege escalation and business logic.
• Assess anonymous-user privacy and sensitive health-information exposure.
• Test REST and GraphQL APIs for access-control and data-exposure issues.
• Assess file uploads, session management, JWT/token security and rate limiting.
• Use tools such as Burp Suite, OWASP ZAP, Nmap, Nuclei and Postman.
• Manually validate vulnerabilities and minimize false positives.
• Prepare clear VAPT reports with evidence, impact and remediation recommendations.
• Perform security retesting after vulnerabilities are fixed.

What We're Looking For:

• 1–3 years of experience in Cybersecurity Associate.
• Good understanding of OWASP Top 10 and API security.
• Practical knowledge of Burp Suite and web/API testing.
• Understanding of HTTP, REST, GraphQL, authentication and authorization.
• Knowledge of IDOR/BOLA and business-logic vulnerabilities.
• Basic scripting/programming knowledge in Python and SQL.
• Strong analytical and problem-solving skills.
• Good technical documentation and communication skills.
• Educational Qualification should be Btech or BE.
• Certifications such as eJPT, PNPT, CEH or OSCP are a plus, but practical skills matter more.

If you're passionate about cybersecurity, enjoy finding vulnerabilities, and want to work closely with developers to build a more secure product, we'd love to hear from you.

Application Question(s):

• What tools have you used for Cybersecurity test?
• We're operational from Kolkata, WB. Are you comfortable working onsite?

Education:

• Bachelor's (Required)

Experience:

• Cybersecurity: 1 year (Required)
• API Security Testing: 1 year (Required)
• Penetration testing: 1 year (Required)

Language:

• English (Required)

Work Location: In person