Jr. Information Security Engineer| Information Security

AvenuesAI Limited; Pune District; On-site; INR 300,000 - 540,000; Full time

Job summary

AvenuesAI Limited is looking for a Junior Information Security Engineer in Pune to join the Information Security team. The role emphasizes VAPT with a strong focus on Web Application Penetration Testing (WAPT).

You will work with senior engineers to identify, exploit, and help remediate security vulnerabilities across digital assets, contributing to the organization's security posture.

Qualifications

• 0–2 years of experience in Information Security.
• BSC/BE/B.Tech in Computer Science/Information Technology or similar degree.
• Certifications such as CISSP, CEH, ISO-27001 Lead Auditor, OSCP are preferred.

Responsibilities

• Conduct Vulnerability Assessments and Penetration Testing (VAPT) on web applications, APIs, and networks.
• Perform deep-dive Web Application Penetration Testing (WAPT) to identify flaws in logic, authentication and session management.
• Collaborate with development teams to provide clear remediation guidance and document findings.

Skills

Burp Suite usage

Web security concepts

OS knowledge

Education

BSC/BE/B.Tech Computer Science/Information Technology

Tools

Nmap

OWASP ZAP

Metasploit

Nessus

Nikto

Job description

Jr. Information Security Engineer| Information Security

0 Years

Pune

Full-Time

Job Overview

We are seeking a passionate and driven Junior Information Security Engineer to join our growing Information security team. In this role, your primary focus will be on Vulnerability Assessment and Penetration Testing (VAPT), with a heavy emphasis on Web Application Penetration Testing (WAPT).

You will work closely with senior engineers to identify, exploit, and help remediate security vulnerabilities across our digital assets.

Key Responsibilities

1. Security Testing & VAPT

• Conduct regular Vulnerability Assessments and Penetration Testing (VAPT) on web applications, APIs, and network infrastructure.
• Perform deep-dive Web Application Penetration Testing (WAPT) to identify flaws in logic, authentication, and session management.
• Utilize Burp Suite Professional/Enterprise extensively for automated scanning, manual intercepting, fuzzing, and custom payload injection.

2. Analysis & Remediation

• Analyze scan results and manual testing findings to eliminate false positives and document valid vulnerabilities.
• Map findings against industry-standard frameworks like the OWASP Top 10.
• Collaborate with development and engineering teams to provide clear, actionable remediation guidance for fixing discovered bugs.

3. Reporting & Documentation

• Assist in drafting comprehensive technical security reports for both technical and non-technical stakeholders.
• Keep security documentation, testing methodologies, and internal knowledge bases up to date.

Preferred Skills

• Hands-on Experience: Strong foundational knowledge and practical experience using Burp Suite (Proxy, Repeater, Intruder, Collaborator).
• Web Security Concepts: Deep understanding of web application architectures, HTTP protocols, and common vulnerabilities (e.g., SQLi, XSS, CSRF, IDOR, SSRF).
• Tooling: Familiarity with other standard security tools such as Nmap, OWASP ZAP, Metasploit, Nikto, and Nessus.
• OS Knowledge: Comfort working with both Linux and Windows environments.

Preferred Qualifications:

• 0-2 years of experience in Information Security
• BSC/BE/B.Tech Computer Science/Information Technology or any similar degree
• CISSP - Certified Information Systems Security Professional, CEH - Certified Ethical Hacker, ISO-27001 – Information Security Management Systems Lead Auditor, BSC (Burp Suite Certified Practitioner), OSCP (Offensive Security Certified Professional)

Required Skills