Security Analyst – Application Security VAPT

JUARA IT SOLUTIONS; Chennai District; On-site; INR 900,000 - 1,300,000; Full time

Job summary

JUARA IT SOLUTIONS is seeking an experienced Security Analyst focused on Application Security and VAPT to join our security team. The role involves conducting comprehensive assessments of web and mobile apps, performing secure code reviews, and delivering risk-based remediation recommendations to strengthen security posture.

The ideal candidate has CEH certification, 5+ years of hands-on security testing experience, and strong knowledge of OWASP Top 10, API security, SAST/DAST/SCA tools, and

Qualifications

• 5+ years of security analysis experience focusing on application security and VAPT.
• Proven ability to conduct web/mobile/app API assessments and report findings.
• Experience with SAST, DAST, and SCA methodologies.
• Knowledge of OWASP Top 10 and API Security Top 10.

Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs, and mobile applications.
• Conduct Static Application Security Testing (SAST) to identify vulnerabilities in source code.
• Perform Dynamic Application Security Testing (DAST) to detect runtime vulnerabilities.
• Carry out Secure Code Reviews to identify security flaws and remediation.
• Perform Software Composition Analysis (SCA) to identify vulnerabilities in third-party libraries.
• Identify, analyze, and validate security vulnerabilities and provide remediation reports.
• Collaborate with development/DevOps for secure coding and remediation.
• Re-test and validate vulnerabilities after remediation.
• Prepare and present detailed security assessment reports to stakeholders.

Skills

Web App VAPT

APIs VAPT

Mobile App VAPT

OWASP Top 10

SAST

DAST

SCA

Secure Coding

Education

Bachelor’s degree in CS/IT

CEH Certification

Tools

SonarQube

Fortify

Burp Suite

Job description

Job Title: Security Analyst – Application Security VAPT & CERTIn Empanelment/Experience (Mandatory)

Experience: 5+ Years

Location: Client Location

Certification: CEH (Certified Ethical Hacker) – Mandatory

Job Summary

We are seeking an experienced Security Analyst with strong expertise in Application Security and

VAPT to join our security team. The ideal candidate will be responsible for conducting

comprehensive security assessments of web and mobile applications, performing secure code

reviews, and supporting the organization in strengthening its overall application security posture.

Key Responsibilities

• Perform Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile
• applications,network and APIs.
• Conduct Static Application Security Testing (SAST) to identify security vulnerabilities in source code.
• Perform Dynamic Application Security Testing (DAST) to detect runtime vulnerabilities in applications.
• Carry out Secure Code Reviews to identify security flaws and recommend remediation.
• Perform Software Composition Analysis (SCA) to identify vulnerabilities in third-party libraries and open-source components.
• Identify, analyze, and validate security vulnerabilities and provide detailed risk-based reports with remediation recommendations.
• Work closely with development and DevOps teams to ensure secure coding practices and assist invulnerability remediation.
• Conduct re-testing and validation of vulnerabilities after remediation.
• Prepare and present detailed security assessment reports to internal stakeholders and clients.

Required Skills

• Strong hands-on experience in Web Application VAPT,APIs and Mobile Application VAPT.
• Solid understanding of OWASP Top 10, API Security Top 10, and common application security vulnerabilities.
• Experience in SAST, DAST, and SCA tools and methodologies.
• Knowledge of secure coding principles and common programming vulnerabilities.
• Experience in manual penetration testing techniques and vulnerability validation.
• Understanding of authentication, authorization, session management, and cryptographic security issues.

Tools & Technologies

• Hands-on experience with the following tools is required:
• SonarQube, Fortify, Burp Suite and Other application security and penetration testing tools

Education

• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or any other degree.Certification
• CEH (Certified Ethical Hacker) – Mandatory

Preferred Skills

• Knowledge of CI/CD security integration.
• Experience in cloud security testing (AWS / Azure / GCP) is an added advantage.
• Strong communication skills for client interaction and technical reporting.

Soft Skills

• Strong analytical and problem-solving skills
• Ability to work independently and manage multiple assessments
• Good documentation and reporting capabilities