Security Analyst – VAPT & Penetration Testing

Role Overview

Key Responsibilities

• Conduct internal and external penetration testing across networks, servers, firewalls, endpoints, and infrastructure.
• Perform web application and API penetration testing, including OWASP vulnerability testing.
• Conduct vulnerability assessments and manually validate vulnerabilities and false positives.
• Perform controlled exploitation to determine the impact and severity of security weaknesses.
• Test network devices, firewalls, routers, switches, VPNs, load balancers, and servers.
• Assess application security across authentication, authorization, sessions, input validation, encryption, and business logic.
• Conduct source-code security reviews and support SAST and DAST activities.
• Assess cloud environments and operating systems.
• Use Burp Suite, Nmap, Nessus, Metasploit, Wireshark, and Kali Linux for security assessments.
• Develop or automate penetration-testing and security activities using Python.
• Prepare reports with evidence, risk ratings, business impact, and remediation recommendations.
• Coordinate remediation, retesting, attack-vector identification, and security-posture improvements.

Required Technical Skills