Job Title: Cyber Security Analyst (Web Application Security & Penetration Testing)

Location: Varanasi, Uttar Pradesh (On-site)

Employment Type: Full-time

Experience: 1-4 Years

Salary: Competitive (Based on Skills & Experience)

Job Summary

Key Responsibilities

Perform Web Application Penetration Testing (WAPT).

Identify and exploit vulnerabilities such as: SQL Injection (SQLi)

Cross-Site Scripting (XSS)

Cross-Site Request Forgery (CSRF)

Remote Code Execution (RCE)

Command Injection

File Upload Vulnerabilities

Authentication & Authorization Issues

Session Management Issues

Broken Access Control

Insecure Direct Object References (IDOR)

SSRF

XXE

Security Misconfigurations

Conduct Vulnerability Assessment and Penetration Testing (VAPT).

Analyze HTTP requests and responses.

Perform API Security Testing (REST APIs, JWT, OAuth).

Capture and analyze network traffic using Wireshark.

Perform packet analysis to identify malicious traffic and network anomalies.

Use Burp Suite for manual security testing.

Validate security findings and provide proof-of-concept demonstrations.

Prepare detailed vulnerability reports with risk ratings and remediation steps.

Collaborate with developers to fix identified vulnerabilities.

Perform secure configuration reviews of Linux servers and web servers.

Verify fixes after remediation and conduct regression security testing.

Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.

Required Technical Skills

Web Security

SQL Injection

Blind SQL Injection

XSS

CSRF

SSRF

XXE

IDOR

Authentication Bypass

Session Hijacking





Cookie Security

Security Headers

OWASP Top 10

Tools

Burp Suite

Wireshark

OWASP ZAP

Nmap

Metasploit (Basic)

Nikto

Gobuster / Dirsearch

sqlmap

ffuf

Postman

Linux Terminal

Networking

TCP/IP

HTTP/HTTPS

DNS

SSL/TLS

Firewalls

VPN

Packet Analysis

Network Troubleshooting

Operating Systems

Linux (Ubuntu, Kali Linux)

Windows

Databases

MySQL

PostgreSQL

Microsoft SQL Server

Programming Knowledge (preferred)

PHP

Laravel

JavaScript

Python (Basic Scripting)

SQL

Preferred Qualifications

Bachelor's degree in Computer Science, Information Security, or related field.

CEH, eJPT, PNPT, Security+, or similar cybersecurity certifications are preferred but not mandatory.

Experience with bug bounty or Capture The Flag (CTF) platforms is a plus.

Strong analytical and problem-solving skills.

Good report writing and communication skills.

Nice to Have

API Penetration Testing experience.

Linux server hardening.

Basic cloud security (AWS, Azure, GCP).

SIEM knowledge.

IDS/IPS concepts.

Docker security.

Git/GitHub familiarity.

What We Offer

Hands-on penetration testing assignments.

Exposure to modern cybersecurity tools and technologies.

Professional growth and continuous learning opportunities.

Collaborative and security-focused work environment.

How to Apply

Contact Person : Himanshu

Contact Number : (phone hidden) (Whatsapp)

Plz call after 6pm (monday to friday)

Pay: ₹30,000.00 - ₹70,000.00 per month

Advantages :

- Commuter assistance
- Internet reimbursement
- Provident Fund

Work Location: In person

📌 Cyber Security Analyst (Varanasi)
🏢 Manoka Assortment
📍 Varanasi