Information Technology Security Analyst

Brace Infotech Private Limited; Hyderabad; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

Brace Infotech Private Limited in Hyderabad is seeking an IT Security Engineer specializing in Product Security with 3–6 years of hands-on experience in application security, vulnerability assessment, and secure SDLC integration.

You will work with DevOps, QA, and product teams to perform SAST/DAST/SCA, conduct VAPT, identify vulnerabilities like SQLi, XSS, broken access control, and drive remediations through the SDLC.

Qualifications

• 3–6 years of experience in application security and product security.
• Hands-on experience with SAST, DAST, SCA, VAPT, and penetration testing.
• Experience securing web applications, APIs, and software products.

Responsibilities

• Perform product security assessments for web applications, APIs and software products.
• Conduct SAST to identify source code vulnerabilities.
• Perform DAST to identify runtime vulnerabilities.
• Conduct SCA to identify vulnerable open-source libraries and dependencies.
• Execute VAPT for web apps, APIs and product components.
• Identify and validate vulnerabilities like SQLi, XSS, broken access control, SSRF, and insecure configurations.
• Perform manual penetration testing to validate automated findings and uncover business logic issues.
• Collaborate with development teams to prioritize remediation and track closure.

Skills

Application security

Vulnerability assessment

Penetration testing

DevSecOps

SDLC

Tools

SAST

DAST

SCA

VAPT

Job description

We are looking for a skilled IT Security Engineer specializing in Product Security with 3–6 years of experience in application security, vulnerability assessment, penetration testing, and secure software development practices. The ideal candidate will have hands‑on experience with SAST, DAST, SCA, VAPT, and penetration testing, along with the ability to identify, assess, prioritize, and remediate security vulnerabilities across web applications, APIs, and software products.

The candidate will work closely with development, DevOps, QA, and product engineering teams to integrate security into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.

Key Responsibilities

• Perform product security assessments, application security testing, and vulnerability assessments for web applications, APIs, and software products.
• Conduct Static Application Security Testing (SAST) to identify source code vulnerabilities and security weaknesses.
• Perform Dynamic Application Security Testing (DAST) to identify runtime vulnerabilities in web applications and APIs.
• Conduct Software Composition Analysis (SCA) to identify vulnerable open-source libraries, third‑party dependencies, and software components.
• Execute Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, and other product components.
• Identify and validate security vulnerabilities such as SQL Injection, Cross‑Site Scripting (XSS), Broken Access Control, SSRF, authentication and authorization flaws, and insecure configurations.
• Perform manual penetration testing to validate automated scanner findings and uncover business logic vulnerabilities.
• Work with development teams to analyze findings, recommend remediation strategies, and track vulnerabilities through closure.