Cyber Security Analyst - VAPT

Qrc Assurance And Solutions; Navi Mumbai; In loco; INR 500.000 - 900.000; Tempo pieno

Descrizione del lavoro

Qrc Assurance And Solutions is seeking an Associate to independently conduct basic penetration tests and vulnerability assessments under supervision. You will ensure accurate testing, document findings clearly, and interact professionally with clients.

Responsibilities include web app testing using OWASP, network scans, producing structured reports with CVSS scores, and coordinating scope with clients under senior guidance. Immediate joiner to 30 days notice.

Competenze

• Familiar with OWASP Top 10 vulnerabilities and secure testing practices.
• Ability to document findings with CVSS scores and clear remediation guidance.
• Basic understanding of Windows and Linux OS security.
• Willingness to pursue security certifications.

Mansioni

• Conduc t web app pen tests per OWASP methodology.
• Perform network vulnerability assessments and document findings.
• Produce vulnerability reports with risk ratings and fixes.
• Communicate scope questions to clients under guidance.

Conoscenze

OWASP Top 10

Burp Suite

Nmap

Network scanning

CVSS reporting

Windows/Linux security

Strumenti

Burp Suite

Nmap

Descrizione del lavoro

ROLE SUMMARY

The Associate independently conducts basic penetration tests and vulnerability assessments under general supervision. Responsible for accurate testing, clear finding documentation and professional client interaction.

KEY RESPONSIBILITIES

• Conducts web application penetration tests using OWASP methodology independently
• Performs network vulnerability assessments and documents findings accurately
• Produces clear, accurate vulnerability reports with risk ratings and remediation guidance
• Communicates with clients for scope clarifications under senior guidance
• Follows QRC testing methodology, PTES standards and responsible disclosure
• Keeps up with emerging CVEs and security research in assigned domain
• Actively pursues first relevant security certification

TECHNICAL COMPETENCIES

• Working knowledge of OWASP Top 10 web application vulnerabilities
• Proficiency in Burp Suite, Nmap and basic network scanning tools
• Understanding of network pen testing enumeration, exploitation, post-exploitation
• Ability to produce structured vulnerability reports with CVSS scoring
• D sic understanding of OS security Windows and LinuxD

Notice Period -Immediate joiner to 30 days