Cyber Security Analyst

Job Title: Cyber Security Analyst (Web Application Security & Penetration Testing)

Location: Varanasi, Uttar Pradesh (On-site)

Employment Type: Full-time

Experience: 1–4 Years

Salary: Competitive (Based on Skills & Experience)

Job Summary

We are looking for a Cyber Security Analyst who is passionate about identifying and fixing security vulnerabilities in web applications and network infrastructure. The ideal candidate should have hands-on experience in Web Application Penetration Testing (WAPT), SQL Injection testing, network traffic analysis using Wireshark, vulnerability assessment, and secure coding practices.

The candidate will work closely with our development team to identify security flaws, perform penetration testing, recommend remediation strategies, and improve the overall security posture of our applications and infrastructure.

Key Responsibilities

Perform Web Application Penetration Testing (WAPT).

Identify and exploit vulnerabilities such as

SQL Injection (SQLi)

Cross-Site Scripting (XSS)

Cross-Site Request Forgery (CSRF)

Remote Code Execution (RCE)

Command Injection

File Upload Vulnerabilities

Authentication & Authorization Issues

Session Management Issues

Broken Access Control

Insecure Direct Object References (IDOR)

SSRF

XXE

Security Misconfigurations

Conduct Vulnerability Assessment and Penetration Testing (VAPT).

Analyze HTTP requests and responses.

Perform API Security Testing (REST APIs, JWT, OAuth).

Capture and analyze network traffic using Wireshark.

Perform packet analysis to identify malicious traffic and network anomalies.

Use Burp Suite for manual security testing.

Validate security findings and provide proof-of-concept demonstrations.

Prepare detailed vulnerability reports with risk ratings and remediation steps.

Collaborate with developers to fix identified vulnerabilities.

Perform secure configuration reviews of Linux servers and web servers.

Verify fixes after remediation and conduct regression security testing.

Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.

Required Technical Skills

Web Security

SQL Injection

Blind SQL Injection

XSS

CSRF

SSRF

XXE

IDOR

Authentication Bypass

Session Hijacking

Cookie Security

Security Headers

OWASP Top 10

Tools

Burp Suite

Wireshark

OWASP ZAP

Nmap

Metasploit (Basic)

Nikto

Gobuster / Dirsearch sqlmap ffuf

Postman

Linux Terminal

Networking

TCP/IP

HTTP/HTTPS

DNS

SSL/TLS

Firewalls

VPN

Packet Analysis

Network Troubleshooting

Operating Systems

Linux (Ubuntu, Kali Linux)

Windows

Databases

MySQL

PostgreSQL

Microsoft SQL Server

Programming Knowledge (Preferred)

PHP

Laravel

JavaScript

Python (Basic Scripting)

SQL

Preferred Qualifications

Bachelor's degree in Computer Science, Information Security, or related field.

CEH, eJPT, PNPT, Security+, or similar cybersecurity certifications are preferred but not mandatory.

Experience with bug bounty or Capture The Flag (CTF) platforms is a plus.

Strong analytical and problem-solving skills.

Good report writing and communication skills.

Nice to Have

Experience securing Laravel or PHP applications.

API Penetration Testing experience.

Linux server hardening.

Basic cloud security (AWS, Azure, GCP).

SIEM knowledge.

IDS/IPS concepts.

Docker security.

Git/GitHub familiarity.

What We Offer

Opportunity to work on real-world web application security projects.

Hands-on penetration testing assignments.

Exposure to modern cybersecurity tools and technologies.

Professional growth and continuous learning opportunities.

Collaborative and security-focused work environment.

How to Apply

Contact Person : Himanshu

Contact Number : 9151828241 (Whatsapp)

Plz call after 6pm (monday to friday)

Job Type: Full-time

Pay: ₹30,000.00 - ₹70,000.00 per month

Benefits

• Commuter assistance
• Internet reimbursement
• Provident Fund

Work Location: In person