Role Overview

VAPT Junior Security Analyst with 1–2 years of experience to join our security team. The ideal candidate will have practical exposure to vulnerability management, penetration testing across multiple attack surfaces (web, mobile, API, network, and AI systems), and reconnaissance techniques used in real-world assessments.

Key Responsibilities
Perform end-to-end vulnerability assessments using Tenable (Nessus/Tenable.io/Tenable.sc), including scan configuration, scheduling, false-positive triage, and remediation tracking
Conduct Web Application Penetration Testing in line with OWASP Top 10 / OWASP Testing Guide
Conduct Internal and External Network Penetration Testing to identify misconfigurations, exposed services, and exploitable vulnerabilities
Conduct Mobile Application Penetration Testing (Android/iOS) covering static and energetic analysis
Conduct API Penetration Testing (REST/SOAP/GraphQL), including auth bypass, IDOR, rate-limiting, and injection testing
Perform AI/LLM Penetration Testing — prompt injection,



model jailbreaks, data leakage, insecure output handling, and other OWASP LLM Top 10 risks
Carry out OSINT and reconnaissance (active and passive) to map attack surface prior to testing
Document findings with transparent technical detail, CVSS scoring, business impact, and remediation guidance
Prepare and deliver skilled VAPT reports for technical and non-technical stakeholders
Retest fixes and validate closure of identified vulnerabilities
Stay current with emerging CVEs, exploits, and attack techniques

Required Skills & Experience

Vulnerability Management
Hands-on experience with Tenable (Nessus/Tenable.io/Tenable.sc) — scan setup, tuning, reporting, risk prioritization

Penetration Testing
Practical experience in Web App PT, Network PT (internal/external), Mobile App PT, and API PT
Working knowledge of AI/LLM security testing concepts

📌 Junior Security Analyst Chennai
🏢 SQ1 Security Technology Private
📍 Chennai