Sr.Security Analyst - Application Security

ValueMentor; Thrissur; On-site; INR 1,800,000 - 3,800,000; Full time

Job summary

ValueMentor is seeking an experienced security project leader to own end-to-end penetration testing engagements for large clients across web, mobile, API, network and cloud environments. You will act as the technical and engagement lead, ensuring timely delivery and high quality, with on-site or client-facing interactions as required.

You will mentor junior consultants, contribute to service development, and support presales with accurate effort estimations and technical solutions.

Qualifications

• 3–5 years of hands-on experience in penetration testing or offensive security.
• Proven track record leading complex security assessments for large clients.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT or similar preferred.

Responsibilities

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.
• Support RFP responses, proposal writing, and technical solutioning.
• Contribute to the development and refinement of security testing services and methodologies.

Skills

Leadership and mentorship

Penetration testing

Engagement management

Client-facing communications

Presales support

Threat modelling

Education

OSCP

OSWA

CRTO

CREST CRT/CCT

Job description

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.

Project Leadership

Key Responsibilities, Deliverables / Outcomes

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.

Technical Execution

• Perform and review web, mobile, API, network, cloud, and configuration security assessments.
• Maintain technical excellence across multiple service lines, staying updated on the latest vulnerabilities, tools, and attack techniques.
• Conduct business logic reviews, threat modeling, and red teaming exercises as needed.

Client Engagement

• Act as a trusted advisor to clients, providing strategic security recommendations and actionable insights.
• Be ready for onsite visits, workshops, and executive-level presentations when required.
• Handle sensitive engagements with professionalism and discretion.

Presales Support

• Support RFP responses, proposal writing, and technical solutioning.
• Participate in client sales meetings and scoping discussions.
• Provide accurate effort estimations and help define delivery models.

Practice Development

• Contribute to the development and refinement of security testing services and methodologies.
• Drive internal initiatives to improve quality, efficiency, and innovation in service delivery.
• Create technical content, whitepapers, or knowledge base articles to support team growth.

Key Skills

• 3-5 years of hands-on experience in penetration testing or offensive security.
• Proven track record of leading complex security assessments with large clients.
• Expertise in Web, Mobile, Network, API, Cloud, Configuration Reviews, and/or Red Teaming.
• Familiarity with security standards such as OWASP, PTES, NIST, and MITRE ATT&CK.
• Strong communication and client-facing skills.
• Experience supporting presales efforts, including proposals, SOWs, and client discussions.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT, or similar are preferred.

Key Competencies

• Accountability
• Communications - Oral & Written
• Analysis Skills
• Passion
• Adaptability