Security Analyst – VAPT & Penetration Testing

About the role

The Security Analyst will lead comprehensive vulnerability assessment and penetration testing (VAPT) across the organization’s IT landscape, including networks, applications, cloud platforms and security systems. You will work closely with technical teams to identify, exploit, and remediate security weaknesses, enhancing the overall security posture.

Key responsibilities

• Conduct internal and external penetration tests on networks, servers, firewalls, endpoints and infrastructure.
• Perform web application and API testing, focusing on OWASP Top 10 vulnerabilities.
• Validate identified vulnerabilities through controlled exploitation and assess impact.
• Test security of network devices, cloud environments, and operating systems.
• Execute source‑code reviews and support SAST/DAST activities.
• Develop and automate testing scripts using Python.
• Produce detailed reports with evidence, risk ratings, business impact and remediation guidance.
• Collaborate with teams to remediate findings and conduct retesting.

Required profile

• Strong hands‑on experience in VAPT across multiple domains (network, web, API, cloud).
• Good knowledge of cybersecurity standards such as OWASP, NIST, ISO/IEC 27001 and PCI DSS.
• Ability to follow established penetration‑testing methodologies and best practices.

Required skills

• Vulnerability Assessment & Penetration Testing (VAPT)
• Network, Web Application, API, Infrastructure and Cloud Security Testing
• Vulnerability exploitation and validation
• OWASP Top 10, SAST, DAST, source‑code security analysis
• Secure coding practices
• Python for security automation
• Burp Suite, Nmap, Nessus, Metasploit, Wireshark, Kali Linux