Security Analyst

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED; Pune District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

VOLKSWAGEN GROUP DIGITAL SOLUTIONS PRIVATE LIMITED is seeking an experienced security tester to perform web application penetration testing, identify vulnerabilities, and collaborate with dev teams to remediate risks. You will document findings, produce risk-based reports, and contribute to securing web apps across platforms.

The role requires strong hands-on testing skills, familiarity with OWASP Top 10, and experience with Burp Suite or OWASP ZAP.

Qualifications

• Proficient in web application penetration testing methodologies.

Responsibilities

• Conduct in-depth penetration testing of web applications using manual and automated tools.

Skills

Web pentesting

OWASP Top 10

Manual testing

API security

Threat modeling

Auth testing

Scripting

Reporting

Vulnerability mgmt

Security standards

Tools

Burp Suite

OWASP ZAP

Job description

Conduct in-depth penetration testing of web applications using both manual techniques and automated tools. 60

Identify, exploit, and document vulnerabilities such as SQL injection, XSS, CSRF, authentication flaws, and business logic issues. 10

Perform threat modeling and risk assessments for web-based applications. 10

Collaborate with development teams to provide remediation strategies and secure coding practices. 10

Prepare detailed reports outlining findings, risk levels, and mitigation recommendations 10

Provide technical oversight in IT security and vulnerability management. 10

Skills/Competencies -

Technical Skills/Competencies

Required Proficiency

Basic Intermediate Advanced Expert

tools (e.g.,BurpSuite, OWASPZAP)

X

Web Application Penetration Testing X

OWASP Top 10 X

Manual Vulnerability Assessment X

API Security Testing (REST, GraphQL) X

Functional Skills/Competencies - Required Proficiency

Basic Intermediate Advanced Expert

Threat Modeling & Risk Assessment X

Authentication & Session Management Testing X

Scripting (Python, Bash, etc.) X

Reporting & Documentation X

IT Security and Vulnerability management X

Security Standards & Compliance (ISO, NIST) X