Role Overview

We are searching for a Security Analyst / Sr. Security Analyst with relevant experience on vulnerability assessment and penetration testing for networks, web applications, mobile applications, wireless security assessment and source code review.

Responsibilities

Primary responsibility is to conduct Black/Grey/White box Vulnerability Assessments & Penetration Testing for web application, network infrastructures (Internal/External)

Stay updated with emerging threats and provides remediation steps for mitigating such attacks. Supporting clients in giving step-by-step guide for replicating potential attack scenarios and security patches if required

Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities, SANS Top 25; etc. Manage and maintain/update/upgrade centralized vulnerability scanners for scanning external/public facing client infrastructure

Qualifications

Education:



MS in IT/ BE/ B. Tech

Experience level: 3 to 8 years of experience in IT security Industry

Certifications desired: GCIH, CEH, GPEN, CCNA security, OSCP

Essential Skills

Excellent knowledge of TCP/IP commonly used protocols Excellent understanding of web applications and databases Hands-on with Windows/Linux server administration Hands on Experience on Tools Like: Nmap, Metasploit, Burp Suite, Acunetix, Nessus, Netsparker, QualysGuard, Wireshark, Nikto, IBM AppScan, W3af, Paros/ZAP proxy, sqlmap/sqlninja, blindelephant, sslyze, ollydbg etc.

Additional Desired Skills

Excellent verbal and written communication

Prior consulting experience would be a plus

Comfortable to contribute as a lead or as an individual

📌 Security Analyst (Mumbai)
🏢 NIO STARS TECHNOLOGIES
📍 Mumbai