Job highlights

- Willingness to stay up to date with the latest trends in web security and penetration testing .
- Experience with basic web security testing or bug bounty programs .
- , Deliverables Outcomes
- As a Security Analyst specializing in Web Penetration Testing, you will assist in identifying vulnerabilities and assessing the security posture of web applications
- You will work closely with senior team members to enhance your skills, perform web penetration testing, and contribute to delivering high quality security assessments
- Assist in performing web application penetration tests both manual and automated on internal and external web applications
- Identify, exploit, and document web vulnerabilities eg, SQL injection, XSS, CSRF, etc under guidance
- Conduct vulnerability assessments using automated web application testing tools like OWASP ZAP, Burp Suite, and other relevant tools
- Analyze web application architectures and workflows to identify security risks
- Document findings, security weaknesses, and suggested remediation steps in detailed reports
- Collaborate with senior team members to refine findings and deliver professional grade reports to clients
- Utilize tools such as Burp Suite, OWASP ZAP, Nikto, and Nmap for web security testing
- Ensure that testing tools and systems are kept up to date to ensure efficiency and coverage of emerging vulnerabilities
- Stay updated with the latest web security threats, exploits, and penetration testing techniques




- Participate in internal training sessions, contribute to team knowledge sharing, and ex d your knowledge of web application security
- Follow industry standards such as OWASP Top 10, PTES, and other relevant guidelines during assessments
- Adhere to internal and client specific security policies, ensuring compliance with industry best practices and security regulations
- Key Skills
- Basic understanding of web application security concepts and common vulnerabilities
- Familiarity with web penetration testing tools like Burp Suite, OWASP ZAP, Nikto, and others
- Knowledge of common web application attack vectors eg, SQL Injection, Cross Site Scripting XSS , Cross Site Request Forgery CSRF
- Ability to analyze and identify vulnerabilities in web technologies eg, HTML, JavaScript, HTTP, APIs
- Robust communication skills, including the ability to document findings clearly and concisely
- Willingness to stay up to date with the latest trends in web security and penetration testing
- Experience with basic web security testing or bug bounty programs
- Knowledge of OWASP Top 10 vulnerabilities and web security best practices
- Exposure to common web technologies like HTML, CSS, JavaScript, and web frameworks eg, React, Angular, Node
- js
- Familiarity with basic network security tools like Wireshark, Nmap, and others
- Key Competencies
- Accountability
- Communications Oral & Written
- Analysis Skills
- Passion
- Adaptability

📌 Security Analyst (Thrissur)
🏢 ValueMentor InfoSec
📍 Thrissur