Cyber Security Analyst

Sveltetech Technologies; Gurugram District; Presencial; INR 600.000 - 1.100.000; Jornada completa

Descripción de la vacante

Sveltetech Technologies in Gurugram, India, seeks an early to mid-career VAPT specialist to conduct targeted assessments of web apps, APIs, mobile apps, and networks. The role emphasizes hands-on testing, vulnerability exploitation, and clear remediation guidance.

The ideal candidate understands OWASP Top 10, uses Burp Suite and related tools, and can communicate risk effectively to technical and business audiences. This is a security-focused position centered in-office.

Formación

• Hands-on security testing of web apps, APIs, mobile apps, networks and infra.
• Ability to identify complex vulnerabilities beyond automated scanners.
• Strong knowledge of OWASP Top 10 and attack methodologies.
• Experience with manual techniques and exploit validation.
• Capability to document risk and remediation recommendations clearly.

Responsabilidades

• Conduct Vulnerability Assessment and Penetration Testing for web applications, APIs, mobile applications, networks, and infrastructure environments.
• Perform detailed manual security testing to identify complex vulnerabilities and attack paths.
• Validate and exploit identified vulnerabilities to assess real-world risk exposure.
• Conduct authenticated and unauthenticated security assessments. Perform network reconnaissance, enumeration, exploitation, and privilege escalation activities.
• Prepare detailed technical assessment reports with risk ratings and clear remediation recommendations.
• Support red teaming and adversary simulation exercises where required.
• Stay updated with emerging vulnerabilities, exploitation techniques, and attack trends.

Conocimientos

VAPT

Penetration testing

Manual testing

Security assessment

OWASP Top 10

Networking concepts

Herramientas

Burp Suite

Nmap

Metasploit

Nessus

Wireshark

SQLMap

Descripción del empleo

KEY RESPONSIBILITIES

Conduct Vulnerability Assessment and Penetration Testing for web applications, APIs, mobile applications, networks, and infrastructure environments.

Perform detailed manual security testing to identify complex vulnerabilities and attack paths.

Validate and exploit identified vulnerabilities to assess real-world risk exposure.

Conduct authenticated and unauthenticated security assessments. Perform network reconnaissance, enumeration, exploitation, and privilege escalation activities.

Prepare detailed technical assessment reports with risk ratings and clear remediation recommendations.

Support red teaming and adversary simulation exercises where required.

Stay updated with emerging vulnerabilities, exploitation techniques, and attack trends.

REQUIRED SKILLS & EXPERIENCE

0-7 years of experience in VAPT, Penetration Testing, or Offensive Security roles.

Strong hands-on expertise in manual web application and API security testing.

Solid understanding of OWASP Top 10, SANS Top 25, authentication flaws, business logic vulnerabilities, and infrastructure exploitation.

Practical experience with tools such as Burp Suite, Nmap, Metasploit, Nessus, Wireshark, SQLMap, and similar platforms.

Strong grasp of networking concepts, operating systems, web technologies, and attack methodologies.

Experience with infrastructure, wireless, and Active Directory security assessments is preferred.

Demonstrated ability to identify vulnerabilities beyond automated scanners through manual analysis and exploitation.

Strong analytical, documentation, and reporting skills able to communicate findings clearly to both technical and business audiences.