Security Analyst

Securin; Chennai District; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Securin, an AI-native cybersecurity company, seeks a penetration tester with 2–5 years of experience to conduct tests on networks and applications, develop prototype security testing tools, and participate in red-team exercises. You will document findings, communicate with clients, and contribute to remediation strategies.

The role involves researching new attack vectors, maintaining detailed testing records, and collaborating with developers and security staff to improve security posture.

Qualifications

• Bachelor's degree in CS/InfoSec or related field
• 2–5 years of penetration testing and vulnerability assessments
• Proficiency in Python, Bash, or similar scripting languages
• Knowledge of OWASP Top 10, CVE, CWE, SANS, OSSTMM, NIST

Responsibilities

• Conduct comprehensive penetration testing and vulnerability assessments on systems, networks, and applications.
• Identify and exploit vulnerabilities using manual testing and automated tools.
• Analyze test results and communicate findings to technical and non-technical stakeholders.
• Develop detailed test plans and methodologies for penetration tests.
• Collaborate with cross-functional teams to implement remediation strategies.
• Manage project timelines and client interactions.
• Stay updated on latest threats and testing techniques; enhance information security knowledge.
• Assist in developing security policies and guidelines.
• Participate in red-team exercises and simulate real-world attacks.
• Maintain documentation of testing activities, findings, and recommendations.
• Prepare reports based on internal templates.
• Interact with clients to deliver results and remediation recommendations.
• Research emerging security topics and new attack vectors.
• Perform hardening of systems and network devices.

Skills

Penetration testing

Vulnerability assessment

Programming languages

Communication

Education

Bachelor's degree in Computer Science or Information Security

Tools

Kali Linux

Metasploit

Burp Suite

Nmap

Wireshark

Job description

Securin is an AI-native cybersecurity company. Our Preemptive Exposure Management Platform turns exposure data into clear decisions — giving organizations the confidence to know which risks are exploitable, what to fix first, and how to act before attackers do.

Job Summary

This position exposes a candidate to the best of both worlds - Penetration Testing as well Developing Prototype tools to assist in the testing phase. This position includes research and prototype development of automated cyber security testing and security data analytics tools used in the assessment of enterprise network segments and web applications. The selected candidate will also participate in cyber security penetration testing engagements in order to establish subject matter expertise.

Duties and Responsibilities

Conduct comprehensive penetration testing and vulnerability assessments on computer systems, networks, and applications.

Identify and exploit security vulnerabilities through manual testing techniques, automated tools, and other means.

Perform in-depth analysis of test results, documenting and communicating findings to technical and non-technical stakeholders.

Develop and execute detailed test plans and methodologies for conducting penetration tests.

Collaborate with cross-functional teams, including developers, system administrators, and network engineers, to implement remediation strategies and mitigate identified vulnerabilities.

Manage project timelines, deadlines, and expectations – including client interactions

Stay updated on the latest security threats, attack vectors, and penetration testing techniques, and continuously enhance knowledge and skills in the field of information security.

Assist in the development and improvement of security policies, procedures, and guidelines.

Participate in red teaming exercises and simulate real-world attack scenarios to assess the overall security posture of the organization. Having proficient knowledge in MITRE ATT&CK framework.

Maintain accurate and detailed documentation of testing activities, findings, and recommendations.

Prepare reports documenting identified issues based on internal templates.

Interact with clients to deliver results, provide feedback, and remediation recommendations on findings.

Research emerging security topics and new attack vectors

Perform and review the hardening of the systems and network devices.

Supports the team and lead analyst in custom penetration test projects as required.

Participates in required client communication, kick-off calls, data analysis, and findings presentation both remotely and in person.

Assists developers and server administrators on coding best practices, secure configurations, and remediation best practices.

Provides assistance to Operations team for debugging, exploitation and vulnerability analysis.

Contributes to the design of penetration test report deliverables, constantly evaluating effectiveness of report outline.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience).

At least 2-5 years of experience in penetration testing and vulnerability assessments, with a focus on web applications, networks, and infrastructure.

Experienced with programming/scripting languages (e.g.: Python, Bash, Rust)

In-depth knowledge of various penetration testing tools, frameworks and OS (e.g., Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark, etc.).

Good understanding of common vulnerabilities and attack vectors (e.g., SQL injection, cross-site scripting, buffer overflows, etc.) and corresponding mitigation techniques.

Familiarity with industry standards and frameworks such as OWASP top 10, CVE, CWE, SANS, OSSTMM, and NIST.

Excellent analytical and problem-solving skills, with the ability to think creatively and strategically to find vulnerabilities.

Effective communication and presentation skills to convey complex technical concepts to both technical and non-technical stakeholders

Core AI Specific Skill Requirements in General:

• Demonstrated ability to use GenAI tools (e.g., Claude, ChatGPT, etc.) for daily work - drafting, research, summarization, data analysis, code generation, or workflow automation as relevant to the role
  
• Working knowledge of GenAI limitations including hallucination risk, context window constraints, and data sensitivity boundaries; ability to validate AI-generated output before acting on it
  
• Familiarity with prompt engineering techniques - structuring multi-step instructions, providing context, and iterating on output quality to achieve production-grade results
  
• Comfort with Agentic AI workflows - using, designing, or building multi-step AI agents that execute tasks autonomously with human-in-the-loop validation
  
• Awareness of AI security fundamentals - prompt injection risks, data classification rules, sandboxed execution, and responsible handling of sensitive data in AI workflows
  
• Familiarity with connecting GenAI tools to internal data sources, APIs, and enterprise systems
  
• Ability to contribute reusable AI skills, templates, agent configurations, or automation workflows to a shared repository for team-wide use
  
• Willingness to learn and adopt new AI tools as they evolve; participation in AI adoption sprints, hackathons, and knowledge-sharing within the team
  

Preferred qualifications:

GIAC, OSCP, OSEP, HTB Certifications, CEH, CompTIA Pentest+, CRTP, CRTE or any equivalent security certifications are preferred.