We are looking for a Security Analyst I – Application Security with strong hands-on experience in testing Web, Mobile, and API security. This role requires independent execution of AppSec engagements, in-depth vulnerability analysis, and active collaboration to improve the application security posture.

Key Responsibilities
- Independently perform Application Security Testing and Penetration Testing for:
Web applications
Thick clients
Web services and APIs
- Conduct end-to-end Mobile Application Security Assessments for Android and iOS platforms.
- Perform API security testing, including authentication, authorization, and business logic validation.
- Execute Static Code Analysis (SAST) and manual secure code reviews to identify vulnerabilities early in the SDLC.
- Execute Static Application Security Testing or Secure code Review with tools such as Checkmarx, HCL App Scan, or Similar.
- Analyze, validate, and prioritize vulnerabilities based on risk and exploitability.
- Prepare detailed technical and executive-level security reports for clients.




- Work closely with internal/external teams to explain findings, recommend secure coding practices, and validate remediation.
- Stay updated with the latest vulnerabilities, tools, and attack techniques in application security.

Requirements
Requirement:
- 2+ years of work experience in Application Security Testing
- Strong understanding of OWASP Top 10, OWASP Mobile Top 10, and API security risks.
- Proven experience exploiting vulnerabilities such as SQL Injection, XSS, IDOR, SSRF, CSRF, authentication flaws, and business logic issues.

Good To Have:
- Hands-on expertise with:Burp Suite (advanced usage for testing and exploitation) & Checkmarx / Fortify or similar SAST tools.
- Good understanding of secure SDLC, application architecture, and modern authentication mechanisms (OAuth, JWT, etc.).
- Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders.
- Robust English commun

📌 Security Analyst (Mumbai)
🏢 Kratikal Tech
📍 Mumbai