Sr Information Security Analyst

Responsibilities

• Perform manual penetration testing on networks, web-based and mobile applications Run scheduled Nessus Scan and other network scans Produce high-quality technical reports and presentations and suggest remediation for the vulnerabilities Work closely with the development teams and support in fixing security vulnerabilities Engage with prospective clients to understand in scope applications and plan out the assessment of their applications or infrastructure Work as a single point of contact for existing and potential clients and manage internal and external VAPT assignments Drive information security awareness and training to promote a secure environment and an effective security culture Support and guide the VAPT team for internal and third-party VAPT assignments for web and mobile applications Provide guidance to Junior security experts on complex projects that require your experience and expertise.
• Support pre-sales and sales team with security-related RFP questionnaires and provide ad-hoc support to business units on security-related matters

Requirements

• Strong fundamentals in network security, application security, and cloud security concepts and controls Understanding of the Secure Software Development Life Cycle and DevSecOps principles Must be updated with the latest security vulnerabilities Good experience with mobile and web VAPT assignments and knowledge of OWASP top 10, WASC, SANS 25 Hands-on experience with BurpSuite, SqlMap, Nmap, Nessus, Kali Linux, and various paid open-source tools Certifications such as CEH, OSCP, or any similar certification would be an added advantage Self-directed technical lead, willing to take ownership and drive results, propose technical directions, make decisions and resolve issues Excellent interpersonal skills, ability to navigate through challenging situations, and good analytical skills Excellent verbal and written communication skills and the ability to interact with senior managers, subject matter experts, regulatory authorities, and clients Information Security Offices

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.