Cyber Security Analyst

Network Intelligence India; Thane; On-site; INR 900,000 - 1,700,000; Full time

Job summary

Network Intelligence India is seeking an experienced security testing professional to lead end-to-end VAPT engagements for web applications, APIs (REST, SOAP, GraphQL), and mobile apps (iOS & Android). You will perform both manual and automated testing, identify and exploit vulnerabilities, and deliver detailed reports with remediation guidance.

The role also involves leading onsite project execution and coordinating with clients.

Qualifications

• Experience conducting web app, API, and mobile app VAPT.
• Proficient in manual and automated security testing.
• Familiar with OWASP Top 10 and API Security Top 10.
• Ability to validate and exploit vulnerabilities with CVSS scoring.

Responsibilities

• Conduct end-to-end VAPT for web apps, APIs, and mobile apps.
• Perform manual and automated security testing using industry tools.
• Prepare comprehensive technical reports and executive summaries.
• Collaborate with clients during remediation and validation.
• Stay updated on vulnerabilities, exploits, and threat intel.
• Align assessments with OWASP, PTES, NIST, CIS, PCI DSS.
• Maintain confidentiality and manage vulnerability trackers.
• Lead onsite project execution with the team.

Skills

WAPT

API Security Testing

Mobile App Security Testing

VAPT

Manual & Automated Testing

OWASP Top 10

Secure Code Review

Vulnerability Validation

Risk Assessment

Threat Modeling

Job description

Role & responsibilities

Conduct end-to-end Vulnerability Assessment and Penetration Testing (VAPT) for: o Web Applications o APIs (REST, SOAP, GraphQL) o Mobile Applications (iOS & Android)

• Perform manual and automated security testing using industry tools (BurpSuite Pro, OWASP ZAP, Postman, etc.).
• Identify, validate, and exploit vulnerabilities with proper risk rating and impact assessment.
• Prepare and deliver comprehensive technical reports (detailing findings, exploitation steps, and mitigation recommendations) and executive-level summaries for clients.
• Collaborate with internal teams and clients during remediation to validate fixes.
• Stay up to date with the latest vulnerabilities, exploits, attack techniques, and threat intelligence.
• Adhere to and align assessments with industry frameworks and standards such as OWASP, PTES, NIST, CIS, PCI DSS.
• Always maintain confidentiality and integrity of client data. Vulnerability tracker management.
• Leading team onsite for overall project execution.

Required Skills & Competencies

• Web Application Penetration Testing (WAPT)
• API Security Testing (REST, SOAP, GraphQL)
• Mobile Application Security Testing (Android & iOS)
• Vulnerability Assessment and Penetration Testing (VAPT)
• Manual & Automated Security Testing
• OWASP Top 10 & API Security Top 10
• Secure Code Review (preferred)
• Vulnerability Validation & Exploitation
• Risk Assessment & CVSS Scoring
• Threat Modeling (preferred)