Jr Security Analyst

Role Overview: VAPT Junior Security Analyst with 12 years of experience to join our security team. The ideal candidate will have practical exposure to vulnerability management, penetration testing across multiple attack surfaces (web, mobile, API, network, and AI systems), and reconnaissance techniques used in real-world assessments.

Key Responsibilities

• Perform end-to-end vulnerability assessments using Tenable (Nessus/Tenable.io/Tenable.sc), including scan configuration, scheduling, false-positive triage, and remediation tracking

• Conduct Web Application Penetration Testing in line with OWASP Top 10 / OWASP Testing Guide

• Conduct Internal and External Network Penetration Testing to identify misconfigurations, exposed services, and exploitable vulnerabilities

• Conduct Mobile Application Penetration Testing (Android/iOS) covering static and dynamic analysis

• Conduct API Penetration Testing (REST/SOAP/GraphQL), including auth bypass, IDOR, rate-limiting, and injection testing

• Perform AI/LLM Penetration Testing prompt injection, model jailbreaks, data leakage, insecure output handling, and other OWASP LLM Top 10 risks

• Carry out OSINT and reconnaissance (active and passive) to map attack surface prior to testing

• Document findings with clear technical detail, CVSS scoring, business impact, and remediation guidance

• Prepare and deliver professional VAPT reports for technical and non-technical stakeholders

• Retest fixes and validate closure of identified vulnerabilities

• Stay current with emerging CVEs, exploits, and attack techniques

  Requirements

• Hands-on experience with Tenable (Nessus/Tenable.io/Tenable.sc) scan setup, tuning, reporting, risk prioritization

• Practical experience in Web App PT, Network PT (internal/external), Mobile App PT, and API PT

• Working knowledge of AI/LLM security testing concepts

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.