Security Analyst / Sr. Security Analyst

Nio Stars Technologies LLP; Maharashtra; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Nio Stars Technologies LLP is seeking a Security Analyst II to conduct vulnerability assessments and penetration testing for web apps and networks. You will stay updated on emerging threats, provide remediation steps, and guide clients in replicating attack scenarios and security patches.

The role requires hands-on testing with OWASP Top 10 awareness and centralized scanner management, spanning web, network, and mobile contexts.

Qualifications

• MS in IT/ BE/ B.Tech is required.
• 3 to 8 years of IT security experience.
• Certifications: GCIH, CEH, GPEN, CCNA security, OSCP preferred.

Responsibilities

• Conduct vulnerability assessments and penetration testing for web apps and networks.
• Stay updated on threats and provide remediation steps and guides.
• Perform manual testing with awareness of OWASP Top 10 and SANS Top 25.

Skills

Vulnerability assessment

Penetration testing

OWASP Top 10

SANS Top 25

TCP/IP knowledge

Windows/Linux server administration

Education

MS in IT/ BE/ B.Tech

Tools

Nmap

Metasploit

Burp Suite

Acunetix

Nessus

Netsparker

QualysGuard

Wireshark

Nikto

IBM AppScan

W3af

ZAP proxy

sqlmap

sqlninja

blindelephant

sslyze

ollydbg

Job description

Role Overview

We are searching for a Security Analyst / Sr. Security Analyst with relevant experience on vulnerability assessment and penetration testing for networks, web applications, mobile applications, wireless security assessment and source code review.

Responsibilities

• Primary responsibility is to conduct Black/Grey/White box Vulnerability Assessments & Penetration Testing for web application, network infrastructures (Internal/External)
• Stay updated with emerging threats and provides remediation steps for mitigating such attacks. Supporting clients in giving step-by-step guide for replicating potential attack scenarios and security patches if required
• Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities, SANS Top 25; etc. Manage and maintain/update/upgrade centralized vulnerability scanners for scanning external/public facing client infrastructure

Qualifications

• Education: MS in IT/ BE/ B. Tech
• Experience level: 3 to 8 years of experience in IT security Industry
• Certifications desired: GCIH, CEH, GPEN, CCNA security, OSCP

Essential Skills

• Excellent knowledge of TCP/IP commonly used protocols Excellent understanding of web applications and databases Hands-on with Windows/Linux server administration Hands on Experience on Tools Like: Nmap, Metasploit, Burp Suite, Acunetix, Nessus, Netsparker, QualysGuard, Wireshark, Nikto, IBM AppScan, W3af, Paros/ZAP proxy, sqlmap/sqlninja, blindelephant, sslyze, ollydbg etc.

Additional Desired Skills

• Excellent verbal and written communication
• Prior consulting experience would be a plus
• Comfortable to contribute as a lead or as an individual