Security Analyst

Conduct in-depth penetration testing of web applications using both manual techniques and automated tools. 60

Identify, exploit, and document vulnerabilities such as SQL injection, XSS, CSRF, authentication flaws, and business logic issues. 10

Perform threat modeling and risk assessments for web-based applications. 10

Collaborate with development teams to provide remediation strategies and secure coding practices. 10

Prepare detailed reports outlining findings, risk levels, and mitigation recommendations 10

Provide technical oversight in IT security and vulnerability management. 10

Skills/Competencies -

Technical Skills/Competencies

Required Proficiency

Basic Intermediate Advanced Expert

tools (e.g.,BurpSuite, OWASPZAP)

X

Web Application Penetration Testing X

OWASP Top 10 X

Manual Vulnerability Assessment X

API Security Testing (REST, GraphQL) X

Functional Skills/Competencies - Required Proficiency

Basic Intermediate Advanced Expert

Threat Modeling & Risk Assessment X

Authentication & Session Management Testing X

Scripting (Python, Bash, etc.) X

Reporting & Documentation X

IT Security and Vulnerability management X

Security Standards & Compliance (ISO, NIST) X