Cyber Security Analyst Vulnerability Assessment & Application Support

Role: Cyber Security Analyst- Vulnerability Assessment & Application Support

Location: Mumbai

Exp: 4-8 Years

Education: BE/B.Tech

+ What are we looking for?

• Experience in vulnerability assessment, penetration testing, or red teaming.
• VM Tools: Qualys, Nessus, Nexpose, Tenable.io
• Pentest Tools: Burp Suite, Metasploit, Nmap, Nikto, Wireshark, OWASP ZAP
• Solid understanding of network protocols, OS internals, web application security, and cloud platforms (AWS/Azure).
• Experience with OWASP Top 10, CWE, MITRE ATT&CK, and CISA KEV.
• Ability to write technical and executive-level reports.
• Scripting knowledge (e.g., Python, Bash, PowerShell) is a plus.
• Bug Bounty experience is a plus.

+ You would be responsible for

• Lead or participate in the regular execution of internal vulnerability scans using tools like Qualys, Tenable, Rapid7, etc.
• Prioritize findings based on risk context (CVSS, EPSS, asset value, threat intel).
• Track and report remediation progress; work closely with infrastructure and application teams to ensure timely fixes.
• Ensure compliance with internal SLAs for remediation (e.g., fix critical within 15 days).
• Develop and maintain dashboards, metrics, and KPIs for executive and operational reporting.
• Maintain the asset inventory and ensure full scan coverage.
• Perform or coordinate internal and external penetration testing for networks, web applications, APIs, and cloud services.
• Validate exploitability of critical vulnerabilities; provide proof-of-concept (PoC) reports where required.