Security Analyst / Sr. Security Analyst

Nio Stars Technologies LLP; Mumbai; On-site; INR 800,000 - 1,400,000; Full time

Job summary

Nio Stars Technologies LLP seeks a Security Analyst / Sr. Security Analyst with hands-on vulnerability assessment and penetration testing experience for networks, web and mobile apps, and source code reviews.

Expertise in OWASP Top 10, SANS Top 25, and manual testing is required. You will guide clients on remediation steps and provide replication guides for security issues.

Qualifications

• MS in IT/BE/B.Tech or equivalent required.
• 3–8 years of IT security experience.
• Certifications such as GCIH, CEH, GPEN, CCNA Security or OSCP preferred.

Responsibilities

• Conduct Black/Grey/White box vulnerability assessments for networks and web/mobile applications.
• Provide remediation steps and step-by-step replication guidance for security issues to clients.
• Stay updated on threats and manage vulnerability scanners for client infrastructures.

Skills

Nmap

Metasploit

Burp Suite

Nessus

OWASP Top 10

sqlmap

Education

MS in IT/ BE/ B.Tech

3–8 years IT security experience

Certifications: GCIH, CEH, GPEN, CCNA Security, OSCP

Tools

Acunetix

Netsparker

QualysGuard

Job description

Role Overview

We are searching for a Security Analyst / Sr. Security Analyst with relevant experience on vulnerability assessment and penetration testing for networks, web applications, mobile applications, wireless security assessment and source code review.

Responsibilities

• Primary responsibility is to conduct Black/Grey/White box Vulnerability Assessments & Penetration Testing for web application, network infrastructures (Internal/External)
• Stay updated with emerging threats and provides remediation steps for mitigating such attacks. Supporting clients in giving step-by-step guide for replicating potential attack scenarios and security patches if required
• Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities, SANS Top 25; etc. Manage and maintain/update/upgrade centralized vulnerability scanners for scanning external/public facing client infrastructure

Qualifications

• Education: MS in IT/ BE/ B. Tech
• Experience level: 3 to 8 years of experience in IT security Industry
• Certifications desired: GCIH, CEH, GPEN, CCNA security, OSCP

Essential Skills

• Excellent knowledge of TCP/IP commonly used protocols Excellent understanding of web applications and databases Hands-on with Windows/Linux server administration Hands on Experience on Tools Like: Nmap, Metasploit, Burp Suite, Acunetix, Nessus, Netsparker, QualysGuard, Wireshark, Nikto, IBM AppScan, W3af, Paros/ZAP proxy, sqlmap/sqlninja, blindelephant, sslyze, ollydbg etc.

Additional Desired Skills

• Excellent verbal and written communication
• Prior consulting experience would be a plus
• Comfortable to contribute as a lead or as an individual