Associate Security Analyst (AppSec)

Kratikal Tech; Bengaluru Urban; On-site; INR 300,000 - 600,000; Full time

Benefits offered by this job

Health insurance

Gratuity payment

Employees' Provident Fund

Job summary

A technology security firm in Bengaluru is seeking an Associate Security Analyst to assist in application security and penetration testing. The role is ideal for early-career professionals with up to 1 year of experience in VAPT. Responsibilities include testing web and mobile applications, documenting vulnerabilities, and collaborating with teams for remediation. Candidates should have foundational knowledge of OWASP, web vulnerabilities, and be eager to learn more about application security and ethical hacking.

Qualifications

• 06 months to less than 1 year of work experience in VAPT.
• Foundational understanding of OWASP Top 10 and common web vulnerabilities.
• Hands-on exposure to Burp Suite for web application testing.

Responsibilities

• Assist in Application Security Testing and Penetration Testing for web applications.
• Perform Mobile Applications VAPT under senior guidance.
• Document vulnerabilities and prepare clear technical reports.
• Collaborate with teams to validate fixes and perform re-testing.

Skills

Application Security Testing

Penetration Testing

Burp Suite

OWASP Top 10

Web Vulnerabilities

HTTP/HTTPS

REST APIs

English Communication

Job description

Bangalore North, India | Posted on 04/10/2026

We are looking for an Associate Security Analyst – Application Security to join our VAPT team. This role is ideal for early‑career professionals who have hands‑on exposure to web and mobile application security testing and are eager to build deep expertise in AppSec and VAPT engagements.

Key Responsibilities

Assist in Application Security Testing and Penetration Testing for web applications, thick clients, and web services.

Perform Mobile Applications (Android & iOS) and APIs VAPT under senior guidance.

Document vulnerabilities, prepare clear technical reports, and assist customers in the remediation phase.

Collaborate with the internal/external team to validate fixes and perform re‑testing.

Continuously learn emerging attack vectors, OWASP updates, and security best practices.

Requirements

06 months to less than 1 year of work experience in VAPT

Foundational understanding of OWASP Top 10 and common web vulnerabilities (SQL Injection, XSS, IDOR, CSRF, etc.).

Hands‑on exposure to Burp Suite for web application testing.

Familiarity with HTTP/HTTPS, REST APIs, authentication mechanisms, and session management.

Strong written and verbal English communication skills for reporting and internal/external discussions.

Eagerness to learn and grow in application security and ethical hacking.

Preferred Certifications

CEH (Certified Ethical Hacker) – Acceptable alternative

Benefits

We also provide good benefits like health insurance, a gratuity payment, and Employees' Provident Fund (a savings plan for your future).

We are an equal opportunity employer, where everyone has a fair chance.