Security Analyst / Sr. Security Analyst

Nio Stars Technologies LLP; Mumbai; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Nio Stars Technologies LLP is seeking a Security Analyst / Sr. Security Analyst to perform vulnerability assessments and penetration testing across networks, web/mobile apps, and source code reviews. You will conduct manual tests, stay ahead of threats, and guide remediation with clients.

The ideal candidate has 3–8 years of IT security experience, MS/BE/BTech, and certifications like CEH, OSCP. Proficiency with tools such as Burp Suite, Nmap, Nessus, and Wireshark is expected.

Qualifications

• MS in IT/ BE/ B.Tech
• 3–8 years IT security experience
• Certifications like GCIH/ CEH/ GPEN/ CCNA Security/ OSCP preferred

Responsibilities

• Conduct vulnerability assessments and penetration testing for web apps and networks
• Lead testing across mobile apps and wireless security assessments
• Provide remediation steps and guidance to clients

Skills

TCP/IP knowledge

Web app & database understanding

Windows/Linux server administration

OWASP top 10 knowledge

Education

MS in IT/ BE/ B.Tech

Tools

Nmap

Metasploit

Burp Suite

Acunetix

Nessus

Netsparker

QualysGuard

Wireshark

Nikto

IBM AppScan

W3af

Paros/ZAP proxy

sqlmap/sqlninja

blindelephant

sslyze

ollydbg

Job description

Role Overview

We are searching for a Security Analyst / Sr. Security Analyst with relevant experience on vulnerability assessment and penetration testing for networks, web applications, mobile applications, wireless security assessment and source code review.

Responsibilities

• Primary responsibility is to conduct Black/Grey/White box Vulnerability Assessments & Penetration Testing for web application, network infrastructures (Internal/External)
• Stay updated with emerging threats and provides remediation steps for mitigating such attacks. Supporting clients in giving step-by-step guide for replicating potential attack scenarios and security patches if required
• Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities, SANS Top 25; etc. Manage and maintain/update/upgrade centralized vulnerability scanners for scanning external/public facing client infrastructure

Qualifications

• Education: MS in IT/ BE/ B. Tech
• Experience level: 3 to 8 years of experience in IT security Industry
• Certifications desired: GCIH, CEH, GPEN, CCNA security, OSCP

Essential Skills

Excellent knowledge of TCP/IP commonly used protocols Excellent understanding of web applications and databases Hands-on with Windows/Linux server administration Hands on Experience on Tools Like: Nmap, Metasploit, Burp Suite, Acunetix, Nessus, Netsparker, QualysGuard, Wireshark, Nikto, IBM AppScan, W3af, Paros/ZAP proxy, sqlmap/sqlninja, blindelephant, sslyze, ollydbg etc.

Additional Desired Skills

• Excellent verbal and written communication
• Prior consulting experience would be a plus
• Comfortable to contribute as a lead or as an individual