Cybersecurity Analyst/Sr Cybersecurity Analyst - VAPT

Key Responsibilities:

1. Onboard and scan both internal and external applications using tools like Netsparker and Acunetix, ensuring all vulnerabilities are captured for further analysis.
2. Conduct weekly assessments of vulnerabilities identified through scans, providing actionable insights and prioritization based on risk.
3. Prepare and deliver comprehensive reports, offering analysis of vulnerabilities along with follow-up actions to ensure remediation.
4. Execute Web Application and API Penetration Tests, and expand scope to include Network and Mobile Security testing, based on experience and expertise.
5. Actively manage vulnerabilities across the Threat and Vulnerability Management (TVM) lifecycle, guiding application/system owners to mitigate risks and address identified vulnerabilities.
6. Review findings, identifying non-relevant issues, and appropriately categorizing them to minimize false positives.
7. Monitor and improve the security posture by managing scores of Global Business Technology (GBT) entities in the Security Scorecard.
8. Oversee the vulnerability portfolio for GBT entities by identifying and evaluating security risks reflected in the Security Scorecard.
9. Collaborate with Subject Matter Experts (SMEs) across applications and entities to drive remediation efforts and improve overall security posture.
10. Perform Internal VAPT (Vulnerability Assessment and Penetration Testing) and External VAPT, ensuring both internal and external application security.
11. Conduct Configuration reviews to ensure systems and applications are securely configured and comply with security best practices.
12. Manage and support Basic Penetration Testing efforts and assist with Bug Bounty Programs, providing insights on vulnerabilities and assisting in resolution.
13. Apply Basic Cloud Security Knowledge to manage AWS alerts and evaluate potential security risks within cloud environments.
14. Utilize Basic Understanding of Nuclei to run scans, identify vulnerabilities, and assist in remediation efforts as part of the security testing process.