Information Security Analyst

Accops; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Accops is seeking a hands-on Security Penetration Tester to identify vulnerabilities across our products, applications, APIs, infrastructure, and networks. You will work with Engineering, Product, and Security teams to strengthen Accops' security posture.

The ideal candidate should have 3+ years of practical VAPT experience and strong knowledge of OWASP Top 10 and OWASP API Security Top 10, with hands-on tool experience (Burp Suite, Nmap, Wireshark, SQLMap, Nikto).

Qualifications

• 3+ years hands-on experience in Penetration Testing, VAPT, and Application Security.
• Strong knowledge of Web Application Security, API Security, Network Security, and Infrastructure Security.
• In-depth understanding of OWASP Top 10 and OWASP API Security Top 10.

Responsibilities

• Perform Web Application, API, Network, and Infrastructure Penetration Testing.
• Conduct vulnerability assessments and penetration tests across Accops products and environments.
• Identify, validate, exploit, and document security vulnerabilities.
• Perform manual security testing in addition to automated scanning.
• Test authentication, authorization, session management, and other security controls.
• Prepare detailed penetration testing reports with descriptions, impact, severity, evidence, and remediation.

Skills

Penetration testing

VAPT

Web application security

API security

Network security

OWASP Top 10

Scripting (Python/Bash/PowerShell)

Tools

Burp Suite

Nmap

Wireshark

SQLMap

Nikto

Job description

Accops is looking for a hands-on Security Penetration Tester to identify, validate, and help remediate security vulnerabilities across our products, applications, APIs, infrastructure, and networks.

The ideal candidate should have strong practical experience in Vulnerability Assessment & Penetration Testing (VAPT), application and network security testing, vulnerability exploitation, and security assessment methodologies. You will work closely with Engineering, Product, and Security teams to identify security weaknesses and improve the overall security posture of Accops products.

Technical Skills Required Mandatory:

• 3+ years of hands-on experience in Penetration Testing / VAPT / Application Security.
• Strong knowledge of:
• Web Application Security
• API Security
• Network Security
• Infrastructure Security
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
• Hands-on experience with penetration-testing tools such as:
• Burp Suite
• Nmap
• Wireshark
• SQLMap
• Nikto
• Understanding of common vulnerabilities such as:
• XSS
• CSRF
• SSRF
• Command Injection
• Authentication/Authorization issues
• Privilege Escalation
• IDOR/BOLA
• Security Misconfiguration
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports and network protocols.
• Ability to perform vulnerability validation and manual exploitation rather than relying only on automated scanners.
• Good scripting/programming knowledge in Python, Bash, PowerShell, or similar languages.
• Strong analytical and problem-solving skills.
• Ability to create clear technical security reports and communicate findings to engineering teams.

Good To have:

• Experience testing enterprise/security products, SaaS applications, endpoint solutions, VPN/ZTNA/VDI/virtualization platforms.
• Knowledge of virtualization technologies such as VMware, Hyper-V, or KVM.
• Experience with cloud security testing.
• Experience with source-code review / secure code review.
• Knowledge of Active Directory and Windows domain security.
• Experience with threat modeling and security assessment methodologies.
• Familiarity with CVSS scoring and CVE analysis.
• Experience with security automation and scripting.

Certifications – Preferred

One or more of the following certifications would be an advantage:

• OSCP
• OSWE
• CEH
• eJPT
• PNPT
• CREST certifications
• Security+ or equivalent security certifications

Soft Skills Required

• Strong communication skills(verbal and written both)
• Proactive
• Self-motivated
• Logical bent of mind (Analytical)
• Flexible/adaptable
• Multi-Tasking
• Excellent team player

Role and Responsibilities:

• Perform Web Application, API, Network, and Infrastructure Penetration Testing.
• Conduct vulnerability assessments and penetration tests across Accops products and environments.
• Identify, validate, exploit, and document security vulnerabilities.
• Perform manual security testing in addition to automated vulnerability scanning.
• Test authentication, authorization, session management, access controls, encryption, input validation, and other security controls.
• Perform testing based on OWASP Top 10 and OWASP API Security Top 10.
• Conduct network and infrastructure security assessments including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and related technologies.
• Perform security testing of Windows and Linux environments.
• Assess vulnerabilities in APIs, web applications, services, endpoints, and network-facing components.
• Use penetration-testing tools to identify and validate vulnerabilities.
• Develop proof-of-concept exploits where required to demonstrate security impact.
• Perform vulnerability verification and re-testing after remediation.
• Prepare detailed penetration testing reports including:
• Vulnerability description
• Business/security impact
• Severity
• Proof of concept/evidence
• Recommended remediation
• Collaborate with developers and engineering teams to explain vulnerabilities and support remediation.
• Track vulnerabilities through their lifecycle and ensure appropriate closure.
• Stay updated on emerging vulnerabilities, CVEs, attack techniques, exploits, and security trends.
• Support security reviews and contribute to improving secure development practices.

Founded in 2012, Accops is a leading provider of secure remote access and digital workspace solutions, enabling organizations to maintain control and governance while offering flexibility to work from any device. Accops offers a comprehensive Digital Workspace suite that includes Zero Trust-based Application Access Gateway, End-User Computing (EUC) Virtualization via VDI, robust Identity & Access Management (IAM) solutions such as Multi-Factor Authentication (MFA) and Single Sign-On (SSO), and thin client hardware and software. solutions.

Accops addresses modern remote work challenges by delivering secure, instant access to business applications. Its solutions protect against network threats and unauthorized access, critical in today’s work-from-anywhere environment. Unlike traditional, multi-product approaches, Accops' pre-integrated suite reduces complexity and deployment time, ensuring faster and more agile implementation.

Headquartered in Pune, Accops has become a significant player in the End-User Computing (EUC) virtualization domain, offering a one-stop solution for organizations seeking to deploy secure remote work infrastructures. Its products, including the Nano OS for secure containerization on BYOD devices, and extensive MFA and SSO capabilities, ensure robust data protection and strong identity management.

Part of Jio Platforms Ltd, Accops continues to innovate and enhance digital workspace solutions with a focus on security, user experience, and operational efficiency.