Associate Security Analyst (AppSec)

Kratikal Tech Private Limited; Mumbai; On-site; INR 300,000 - 500,000; Full time

Benefits offered by this job

Health insurance

Gratuity payment

Employees' Provident Fund

Job summary

A tech company in Mumbai is seeking a candidate for Application Security Testing and Penetration Testing. The role involves assisting in various testing processes, documenting vulnerabilities, and collaborating with teams to ensure fixes. The ideal candidate should have up to a year of experience in VAPT, a foundational understanding of web vulnerabilities, and hands-on experience with tools like Burp Suite. The position offers a chance to learn and grow in a startup environment with substantial benefits including health insurance and provident fund.

Qualifications

• 6 months to less than 1 year of work experience in VAPT.
• Foundational understanding of OWASP Top 10 and common web vulnerabilities.
• Hands-on exposure to Burp Suite for web application testing.
• Familiarity with HTTP/HTTPS, REST APIs, and authentication mechanisms.
• Strong English communication skills for reporting.

Responsibilities

• Assist in Application Security Testing and Penetration Testing for web applications.
• Perform Mobile Applications and APIs VAPT under senior guidance.
• Document vulnerabilities and assist customers in the remediation phase.
• Collaborate with the team to validate fixes and perform re-testing.
• Continuously learn emerging attack vectors and security best practices.

Skills

Application Security Testing

Penetration Testing

VAPT

OWASP Top 10

Burp Suite

English Communication

Tools

Burp Suite

Job description

Key Responsibilities:

• Assist in Application Security Testing and Penetration Testing for web applications, thick clients, and web services.
• Perform Mobile Applications (Android & iOS) and APIs VAPT under senior guidance.
• Document vulnerabilities, prepare clear technical reports, and assist customers in the remediation phase.
• Collaborate with the internal/external team to validate fixes and perform re-testing.
• Continuously learn emerging attack vectors, OWASP updates, and security best practices.

Requirements

06 months to less than 1 year of work experience in VAPT

Foundational understanding of OWASP Top 10 and common web vulnerabilities (SQL Injection, XSS, IDOR, CSRF, etc.)

Hands‑on exposure to Burp Suite for web application testing.

Familiarity with HTTP/HTTPS, REST APIs, authentication mechanisms, and session management.

Strong written and verbal English communication skills for reporting and internal/external discussions.

Eagerness to learn and grow in application security and ethical hacking.

Preferred Certifications: CEH (Certified Ethical Hacker) – Acceptable alternative

Benefits

Get the fast learning and exciting environment of a startup, combined with the stable work and strong performance of a bigger company. There's lots of room to learn, grow, and share your ideas.

We also provide good benefits like health insurance, a gratuity payment, and Employees' Provident Fund (a savings plan for your future).

We are an equal opportunity employer, where everyone has a fair chance.