Security Analyst - Web

ValueMentor; Thrissur; On-site; INR 450,000 - 600,000; Full time

Job summary

ValueMentor is seeking a Security Analyst specializing in web penetration testing. You will assist in identifying vulnerabilities and security posture of web applications, working with senior team members to deliver high-quality assessments.

You will perform manual and automated tests, document findings, and contribute to professional-grade reports for clients, using Burp Suite, OWASP ZAP, Nikto, and Nmap. Stay current with threats and industry guidelines.

Qualifications

• Basic understanding of web application security concepts.
• Familiarity with web penetration testing tools like Burp Suite, OWASP ZAP, Nikto.
• Knowledge of common web application attack vectors (e.g., SQL Injection, XSS, CSRF).
• Ability to analyze vulnerabilities in web technologies (HTML, JavaScript, HTTP, APIs).
• Strong communication skills for reporting.
• Willingness to stay up-to-date with trends in web security and pentesting.
• Experience with basic web security testing or bug bounty programs.
• Knowledge of OWASP Top 10 vulnerabilities and best practices.
• Exposure to web technologies (HTML, CSS, JavaScript, React/Angular/Node.js).
• Familiarity with network security tools like Wireshark and Nmap.

Responsibilities

• Assist in performing web application penetration tests (manual and automated).
• Identify, document web vulnerabilities under guidance.
• Conduct vulnerability assessments using automated tools (OWASP ZAP, Burp Suite).
• Analyze architectures and workflows to identify security risks.
• Document findings and remediation steps in reports.
• Collaborate with seniors to refine findings and deliver reports to clients.
• Utilize Burp Suite, OWASP ZAP, Nikto, and Nmap for testing.
• Keep testing tools and systems up-to-date for coverage.
• Stay updated with latest web security threats and techniques.
• Participate in internal training and knowledge sharing.
• Follow OWASP Top 10, PTES, and industry guidelines.
• Adhere to client security policies and best practices.

Skills

Web security basics

OWASP Top 10

Vulnerability analysis

Communication skills

Bug bounty experience

Web tech knowledge

Networking basics

Tools

Burp Suite

OWASP ZAP

Nikto

Nmap

Wireshark

Job description

Key Responsibilities, Deliverables / Outcomes

As a Security Analyst specializing in Web Penetration Testing, you will assist in identifying vulnerabilities and assessing the security posture of web applications. You will work closely with senior team members to enhance your skills, perform web penetration testing, and contribute to delivering high-quality security assessments.

• Assist in performing web application penetration tests (both manual and automated) on internal and external web applications.
• Identify, exploit, and document web vulnerabilities (e.g., SQL injection, XSS, CSRF, etc.) under guidance.
• Conduct vulnerability assessments using automated web application testing tools like OWASP ZAP, Burp Suite, and other relevant tools.
• Analyze web application architectures and workflows to identify security risks.
• Document findings, security weaknesses, and suggested remediation steps in detailed reports.
• Collaborate with senior team members to refine findings and deliver professional-grade reports to clients.
• Utilize tools such as Burp Suite, OWASP ZAP, Nikto, and Nmap for web security testing.
• Ensure that testing tools and systems are kept up-to-date to ensure efficiency and coverage of emerging vulnerabilities.
• Stay updated with the latest web security threats, exploits, and penetration testing techniques.
• Participate in internal training sessions, contribute to team knowledge sharing, and expand your knowledge of web application security.
• Follow industry standards such as OWASP Top 10, PTES, and other relevant guidelines during assessments.
• Adhere to internal and client-specific security policies, ensuring compliance with industry best practices and security regulations.

Key Skills

• Basic understanding of web application security concepts and common vulnerabilities.
• Familiarity with web penetration testing tools like Burp Suite, OWASP ZAP, Nikto, and others.
• Knowledge of common web application attack vectors (e.g., SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF)).
• Ability to analyze and identify vulnerabilities in web technologies (e.g., HTML, JavaScript, HTTP, APIs).
• Strong communication skills, including the ability to document findings clearly and concisely.
• Willingness to stay up-to-date with the latest trends in web security and penetration testing.
• Experience with basic web security testing or bug bounty programs.
• Knowledge of OWASP Top 10 vulnerabilities and web security best practices.
• Exposure to common web technologies like HTML, CSS, JavaScript, and web frameworks (e.g., React, Angular, Node.js).
• Familiarity with basic network security tools like Wireshark, Nmap, and others.

Key Competencies

• Accountability
• Communications - Oral & Written
• Analysis Skills
• Passion
• Adaptability