Information Technology Security Analyst

Job Summary

We are looking for a skilled IT Security Engineer specializing in Product Security with 3–6 years of experience in application security, vulnerability assessment, penetration testing, and secure software development practices. The ideal candidate will have hands-on experience with SAST, DAST, SCA, VAPT, and penetration testing, along with the ability to identify, assess, prioritize, and remediate security vulnerabilities across web applications, APIs, and software products.

The candidate will work closely with development, DevOps, QA, and product engineering teams to integrate security into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.

Key Responsibilities

• Perform product security assessments, application security testing, and vulnerability assessments for web applications, APIs, and software products.
• Conduct Static Application Security Testing (SAST) to identify source code vulnerabilities and security weaknesses.
• Perform Dynamic Application Security Testing (DAST) to identify runtime vulnerabilities in web applications and APIs.
• Conduct Software Composition Analysis (SCA) to identify vulnerable open-source libraries, third-party dependencies, and software components.
• Execute Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, and other product components.
• Identify and validate security vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Broken Access Control, SSRF, authentication and authorization flaws, and insecure configurations.
• Perform manual penetration testing to validate automated scanner findings and uncover business logic vulnerabilities.
• Work with development teams to analyze findings, recommend remediation strategies, and track vulnerabilities through closure.