Senior Information Security Analyst

To The New; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

To The New is seeking a Senior Information Security Analyst to conduct manual penetration testing on networks, web, and mobile apps. The role involves running Nessus and other scans, delivering high-quality reports, and guiding remediation with development teams.

The candidate will interact with clients, plan assessments for applications and infrastructure, and lead VAPT assignments while mentoring junior staff, driving security awareness, and supporting pre-sales inquiries.

Qualifications

• Strong fundamentals in network security, application security, and cloud security concepts and controls.
• Understanding of Secure Software Development Life Cycle and DevSecOps principles.
• Must be updated with the latest security vulnerabilities.
• Good experience with mobile and web VAPT assignments and knowledge of OWASP top 10, WASC, SANS 25.
• Hands-on experience with BurpSuite, SqlMap, Nmap, Nessus, Kali Linux, and various paid open-source tools.
• Certifications such as CEH, OSCP, or similar would be an added advantage.

Responsibilities

• Perform manual penetration testing on networks, web-based and mobile applications.
• Run scheduled Nessus Scan and other network scans.
• Produce high-quality technical reports and presentations and suggest remediation for the vulnerabilities.
• Work closely with the development teams and support in fixing security vulnerabilities.
• Engage with prospective clients to understand in scope applications and plan out the assessment of their applications or infrastructure.
• Work as a single point of contact for existing and potential clients and manage internal and external VAPT assignments.

Skills

Network security fundamentals

Application security fundamentals

Cloud security concepts

DevSecOps principles

VAPT tooling knowledge

OWASP Top 10 awareness

Communication skills

Tools

BurpSuite

SqlMap

Nmap

Nessus

Kali Linux

Job description

Senior Information Security Analyst – Information Security

• Perform manual penetration testing on networks, web-based and mobile applications
• Run scheduled Nessus Scan and other network scans
• Produce high-quality technical reports and presentations and suggest remediation for the vulnerabilities
• Work closely with the development teams and support in fixing security vulnerabilities
• Engage with prospective clients to understand in scope applications and plan out the assessment of their applications or infrastructure
• Work as a single point of contact for existing and potential clients and manage internal and external VAPT assignments
• Drive information security awareness and training to promote a secure environment and an effective security culture
• Support and guide the VAPT team for internal and third-party VAPT assignments for web and mobile applications
• Provide guidance to Junior security experts on complex projects that require your experience and expertise.
• Support pre-sales and sales team with security-related RFP questionnaires and provide ad-hoc support to business units on security-related matters

Requirements

• Strong fundamentals in network security, application security, and cloud security concepts and controls
• Understanding of the Secure Software Development Life Cycle and DevSecOps principles
• Must be updated with the latest security vulnerabilities
• Good experience with mobile and web VAPT assignments and knowledge of OWASP top 10, WASC, SANS 25
• Hands-on experience with BurpSuite, SqlMap, Nmap, Nessus, Kali Linux, and various paid open-source tools
• Certifications such as CEH, OSCP, or any similar certification would be an added advantage
• Self-directed technical lead, willing to take ownership and drive results, propose technical directions, make decisions and resolve issues
• Excellent interpersonal skills, ability to navigate through challenging situations, and good analytical skills
• Excellent verbal and written communication skills and the ability to interact with senior managers, subject matter experts, regulatory authorities, and client's Information Security Offices

Life is Better Together

A glimpse into the milestones, wins, and everyday moments that shape life at TO THE NEW.

Celebrating milestones. Inspiring what's next

Geek Combat (Hackathon)

Turning bold ideas into real solutions

Marathon

Going the extra mile, together

Diwali celebrations

Bringing festive spirit to work

Empowering every voice, every day

Bootcamp

Learning together. Growing every day

Ready to write your next chapter?

Join a team that values your voice as much as your code. We're hiring across all departments.