Cyber Analysts

WillWare Technologies; Mumbai; In loco; INR 1.200.000 - 1.800.000; Tempo pieno

Descrizione del lavoro

WillWare Technologies in Mumbai is seeking a Cyber Analyst specialized in vulnerability management and penetration testing. You will lead internal scans, prioritize risks, and work with IT teams to ensure timely remediation across networks, apps, and cloud services.

You will develop executive dashboards, maintain asset inventories, and contribute to security KPIs. Relevant certifications and scripting ability are preferred for advanced analysis.

Competenze

• 2-3 years of experience in vulnerability assessment, penetration testing, or red teaming.
• Certifications such as OSCP, CEH, GPEN, or GWAPT are a plus.

Mansioni

• Lead or participate in regular internal vulnerability scans using tools like Qualys, Nessus, Nexpose, and Tenable.io.
• Prioritize findings based on risk context (CVSS, EPSS, asset value, threat intel).
• Track remediation progress and coordinate with infra and app teams for timely fixes.
• Ensure compliance with internal SLAs for remediation (e.g., fix critical within 15 days).
• Develop dashboards, metrics, and KPIs for executive and operational reporting.
• Maintain asset inventory and ensure full scan coverage.
• Perform or coordinate internal and external penetration testing for networks, web apps, APIs, and cloud services.
• Validate exploitability of critical vulnerabilities and provide PoCs when required.

Conoscenze

Vulnerability assessment

Penetration testing

Red teaming

Report writing

Python scripting

Strumenti

Qualys

Nessus

Nexpose

Tenable.io

Descrizione del lavoro

Role :Cyber Analysts - Vulnerability Management and Penetration Testing

Job Description:

• Lead or participate in the regular execution of internal vulnerability scans using tools like Qualys, Tenable, Rapid7, etc.
• Prioritize findings based on risk context (CVSS, EPSS, asset value, threat intel).
• Track and report remediation progress; work closely with infrastructure and application teams to ensure timely fixes.
• Ensure compliance with internal SLAs for remediation (e.g., fix critical within 15 days).
• Develop and maintain dashboards, metrics, and KPIs for executive and operational reporting.
• Maintain the asset inventory and ensure full scan coverage.
• Perform or coordinate internal and external penetration testing for networks, web applications, APIs, and cloud services.
• Validate exploitability of critical vulnerabilities; provide proof-of-concept (PoC) reports where required.

Required Skills and Experience:

• 2-3 years of experience in vulnerability assessment, penetration testing, or red teaming.
• VM Tools: Qualys, Nessus, Nexpose, Tenable.io
• Solid understanding of network protocols, OS internals, web application security, and cloud platforms (AWS/Azure).
• Experience with OWASP Top 10, CWE, MITRE ATT&CK, and CISA KEV.
• Ability to write technical and executive-level reports.
• Scripting knowledge (e.g., Python, Bash, PowerShell) is a plus.
• Bug Bounty experience is a plus.
• Security Certifications: OSCP, eJPT, CEH, GPEN, GWAPT, CRTO, CEH