We are looking for a Security Analyst – Application Security with robust hands-on experience in testing Web, Mobile, and API security. This role requires independent execution of AppSec engagements, in-depth vulnerability analysis, and active collaboration to improve the application security posture.

Key Responsibilities

• Independently perform Application Security Testing and Penetration Testing for:
Web applications
Thick clients
Web services and APIs

• Conduct end-to-end Mobile Application Security Assessments for Android and iOS platforms.

• Perform API security testing, including authentication, authorization, and business logic validation.

• Execute Static Code Analysis (SAST) and manual secure code reviews to identify vulnerabilities early in the SDLC.

• Execute Static Application Security Testing or Secure code Review with tools such as Checkmarx, HCL App Scan, or Similar.

• Analyze, validate, and prioritize vulnerabilities based on risk and exploitability.

• Prepare detailed technical and executive-level security reports for clients.





• Work closely with internal/external teams to explain findings, recommend secure coding practices, and validate remediation.

• Stay updated with the latest vulnerabilities, tools, and attack techniques in application security.

Requirements
Requirement:

• More than 6 months of work experience in Application Security Testing

• Strong understanding of OWASP Top 10, OWASP Mobile Top 10, and API security risks.

• Proven experience exploiting vulnerabilities such as SQL Injection, XSS, IDOR, SSRF, CSRF, authentication flaws, and business logic issues.

Good To Have:

• Hands-on expertise with:Burp Suite (advanced usage for testing and exploitation) & Checkmarx / Fortify or similar SAST tools.

• Valuable understanding of secure SDLC, application architecture, and contemporary authentication mechanisms (OAuth, JWT, etc.).

• Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders.

📌 Security Analyst Hyderabad (India)
🏢 Kratikal Tech
📍 India