Position Overview:

The Security Analyst is expected to perform vulnerability assessment, security analysis, penetration testing, code review of the product/modules and report the findings in defect tracking tool. It also includes but not limited to re analyze the findings and work with developers for the fixes.

Education Requirements:

- Bachelor's Degree required; Master's Degree, BSCIT, MSCIT, any IT or Computer Graduate
- Preferred CEH, OSCP or any other security related certification.

Job Functions/Responsibilities

1) Manual Testing:

- Perform threat modelling
- Perform architectural analysis
- Perform logical security assessment
- Monitor third party and internal API's, SDK and libraries are up to date.
- Generate assessment report
- Report your findings as per severity
- Participate in secure SDLC by reviewing functional and design documents.
- Perform manual and automated code reviews by using IAST, SAST and DAST tools.

2) Automation testing:

- To use automated scanning tools
- Review false positives and true positives
- Generate assessment report
- Report your findings as per severity
- Analyze reports from interactive source code review tool for false positives and include it in the report.

📌 "Application Security Analyst" (Mumbai)
🏢 EClinical Works India Private
📍 Mumbai