Sr.Security Analyst - Application Security

ValueMentor; Thrissur; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

ValueMentor is seeking a seasoned security project lead to drive end-to-end penetration testing engagements for large clients. You will act as the primary technical and engagement lead, ensuring timely delivery and high-quality outputs while guiding junior consultants.

In addition to hands-on assessments across web, mobile, API, network, and cloud, you will participate in presales, contribute to method development, and present findings to executive stakeholders from client sites as needed.

Qualifications

• 3–5 years of hands‑on experience in penetration testing or offensive security.
• Proven track record of leading complex security assessments with large clients.
• Expertise in Web, Mobile, Network, API, Cloud, Configuration Reviews, and/or Red Teaming.
• Familiarity with security standards such as OWASP, PTES, NIST, and MITRE ATT&CK.
• Strong communication and client‑facing skills.
• Experience supporting presales efforts, including proposals, SOWs, and client discussions.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT, or similar are preferred.

Responsibilities

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.
• Perform and review web, mobile, API, network, cloud, and configuration security assessments.
• Maintain technical excellence across multiple service lines, staying updated on the latest vulnerabilities, tools, and attack techniques.
• Conduct business logic reviews, threat modeling, and red teaming exercises as needed.
• Act as a trusted advisor to clients, providing strategic security recommendations and actionable insights.
• Be ready for onsite visits, workshops, and executive-level presentations when required.
• Handle sensitive engagements with professionalism and discretion.
• Support RFP responses, proposal writing, and technical solutioning.
• Participate in client sales meetings and scoping discussions.
• Provide accurate effort estimations and help define delivery models.
• Contribute to the development and refinement of security testing services and methodologies.
• Drive internal initiatives to improve quality, efficiency, and innovation in service delivery.
• Create technical content, whitepapers, or knowledge base articles to support team growth.

Skills

Penetration testing

Security leadership

Client-facing skills

Presales support

Job description

Project Leadership

Key Responsibilities, Deliverables / Outcomes

• Lead and manage large, complex penetration testing and security testing engagements end-to-end.
• Act as the primary technical and engagement lead for key client accounts.
• Ensure timely delivery, quality assurance, and stakeholder communication throughout project lifecycles.
• Provide mentorship and guidance to junior and mid-level consultants.

Technical Execution

• Perform and review web, mobile, API, network, cloud, and configuration security assessments.
• Maintain technical excellence across multiple service lines, staying updated on the latest vulnerabilities, tools, and attack techniques.
• Conduct business logic reviews, threat modeling, and red teaming exercises as needed.

Client Engagement

• Act as a trusted advisor to clients, providing strategic security recommendations and actionable insights.
• Be ready for onsite visits, workshops, and executive-level presentations when required.
• Handle sensitive engagements with professionalism and discretion.

Presales Support

• Support RFP responses, proposal writing, and technical solutioning.
• Participate in client sales meetings and scoping discussions.
• Provide accurate effort estimations and help define delivery models.

Practice Development

• Contribute to the development and refinement of security testing services and methodologies.
• Drive internal initiatives to improve quality, efficiency, and innovation in service delivery.
• Create technical content, whitepapers, or knowledge base articles to support team growth.

Key Skills

• 3–5 years of hands‑on experience in penetration testing or offensive security.
• Proven track record of leading complex security assessments with large clients.
• Expertise in Web, Mobile, Network, API, Cloud, Configuration Reviews, and/or Red Teaming.
• Familiarity with security standards such as OWASP, PTES, NIST, and MITRE ATT&CK.
• Strong communication and client‑facing skills.
• Experience supporting presales efforts, including proposals, SOWs, and client discussions.
• Certifications such as OSCP, OSWA, CRTO, CREST CRT/CCT, or similar are preferred.

Key Competencies

• Accountability
• Communications - Oral & Written
• Analysis Skills
• Passion
• Adaptability