1.

Vulnerability

Assessment &

- Penetration Testing (VAPT)

- Conduct vulnerability assessments and basic penetration testing of network devices, servers, applications, and IT infrastructure.

- Identify, validate, document, and prioritize security vulnerabilities based on risk and business impact.

- Use security assessment tools such as Nmap, Nessus, OpenVAS, Burp Suite, or equivalent tools.

- Prepare VAPT reports with findings, risk ratings, evidence, and remediation recommendations.

- Perform vulnerability retesting and track remediation activities.

2. IT Infrastructure &

- Network Security Audits

- Conduct security audits of network infrastructure, including routers, switches, firewalls, and network security appliances.

- Review firewall rules, access control lists (ACLs), NAT policies, VPN configurations, and administrative access controls.

- Audit switch configurations, VLAN segmentation, trunk ports, unused ports, port security, and management access.

- Review network architecture, access controls, network segmentation, and security configurations against established security standards.

- Identify configuration weaknesses and recommend corrective actions.

3. Firewall &

- NMS Security

- Review firewall configurations, rule bases, security policies, logging, and monitoring settings.

- Verify secure management access, role-based access controls, and configuration backup practices.

- Audit NMS platforms for device discovery, monitoring permissions, SNMP configurations, access control, and alerting.

- Check SNMP versions and configurations, prioritizing SNMPv3 and secure community-string handling where applicable.

- Review network device logs, monitoring alerts, and configuration changes for potential security issues.

4.

Security

Compliance &

- Documentation





- Assist in conducting internal security audits and compliance assessments.

- Evaluate configurations against organizational security policies, vendor hardening guidelines, and applicable security standards.

- Maintain audit checklists, evidence, vulnerability registers, and risk assessment reports.

- Prepare clear audit findings and actionable remediation recommendations.

- Coordinate with infrastructure and network teams to close identified security gaps.

5.

Security

Monitoring &

- Incident Support

- Review security logs and alerts to identify suspicious activities.

- Assist in initial investigation and escalation of security incidents.

- Support incident response, root-cause analysis, and post-incident documentation.

- Track security findings and follow up with responsible teams until closure.

Required Technical Skills

- Knowledge of VAPT methodologies and penetration testing fundamentals.

- Understanding of network security, TCP/IP, DNS, HTTP/HTTPS, routing, and subnetting.

- Practical knowledge of firewalls, switches, routers, VLANs, ACLs, and VPNs.

- Understanding of NMS platforms, SNMP, syslog, device monitoring, and network alerting.

- Familiarity with vulnerability scanning and security testing tools such as Nmap, Nessus, OpenVAS, and Burp Suite.

- Knowledge of firewall rule reviews, network device hardening, access control, and secure configuration practices.

- Understanding of Linux and Windows security fundamentals.

- Basic knowledge of security standards and frameworks such as ISO 27001, CIS Benchmarks, and NIST.

- Good report-writing, documentation, analytical, and troubleshooting skills.

Pay: ₹250,000.00 - ₹350,000.00 per year

Advantages

- Health insurance

- Provident Fund

Education

- Bachelor's (Preferred)

License/Certification

- security audit (Preferred)

Work Location: In person

📌 Junior Security Analyst (Kolkata)
🏢 Infotek Services
📍 Kolkata