Security Analyst – VAPT & Penetration Testing

About the role

The Security Analyst will lead comprehensive vulnerability assessment and penetration testing (VAPT) across the organization’s IT landscape, including networks, applications, cloud platforms and security systems. You will work closely with technical teams to identify, exploit and remediate security weaknesses, helping to strengthen the overall security posture.

Key responsibilities

• Conduct internal and external penetration tests on networks, servers, firewalls, endpoints and infrastructure.
• Perform web‑application and API testing, focusing on OWASP Top 10 vulnerabilities.
• Validate findings, exploit vulnerabilities where safe, and assess real‑world impact.
• Test security of network devices, routers, switches, VPNs, load balancers and servers.
• Assess application security covering authentication, authorization, session management, input validation, encryption and business‑logic flaws.
• Execute source‑code reviews and support SAST/DAST activities.
• Evaluate cloud environments and operating systems for security gaps.
• Produce detailed reports with evidence, risk ratings, business impact and remediation recommendations.
• Collaborate with technical teams to remediate issues and perform retesting.

Required profile

• Strong hands‑on experience with VAPT across network, web, API and cloud contexts.
• Familiarity with cybersecurity standards and frameworks such as OWASP, NIST, ISO/IEC 27001 and PCI DSS.
• Ability to follow established penetration‑testing methodologies and best practices.
• Proven capability to communicate findings clearly and work with remediation teams.

Required skills

• Python (for automation and scripting)
• Burp Suite
• Nmap
• Nessus
• Metasploit
• Wireshark
• Kali Linux
• SAST and DAST tools
• Source‑code security analysis