Security Analyst – Application Security (VAPT)

We're Hiring | Security Analyst – Application Security (VAPT)

📍 Location: Mumbai

💼 Experience: 8+ Years

🎓 Certifications: CEH (Certified Ethical Hacker) & CERT-In Empanelment/Experience (Mandatory)

We are looking for an experienced Security Analyst – Application Security (VAPT) to join our team. If you have hands-on expertise in application security testing, vulnerability assessments, and penetration testing, we'd love to hear from you.

Key Responsibilities

🔹 Perform Vulnerability Assessment & Penetration Testing (VAPT) for web applications, mobile applications, APIs, and networks.

🔹 Conduct Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

🔹 Perform secure code reviews and identify application security vulnerabilities.

🔹 Prepare detailed risk-based assessment reports with remediation recommendations.

🔹 Collaborate with Development and DevOps teams to implement secure coding practices and validate fixes.

🔹 Conduct vulnerability re-testing and support clients in strengthening their application security posture.

Required Skills

✔️ 5+ years of hands-on experience in Application Security and VAPT.

✔️ Strong expertise in Web, Mobile, and API Security Testing.

✔️ In-depth knowledge of OWASP Top 10, API Security Top 10, and secure coding principles.

✔️ Experience with manual penetration testing and vulnerability validation.

✔️ Strong understanding of authentication, authorization, session management, and cryptographic security.

⭐ Experience with CI/CD security integration.

⭐ Exposure to cloud security testing (AWS, Azure, or GCP) is an added advantage.

⭐ Strong analytical, documentation, and client communication skills.

🎓 Qualification: Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a related field.