Zensar Technologies - Security Analyst - VAPT (4-7 yrs)

Job Description :

- Security Analyst - VAPT

- Certifications Mandatory : OSCP, CREST, GXPN, GPEN

Experience : 4-7yr experience

Location : Pune(Remote)

Job Responsibilities :

- Develop and execute security testing project plans.

- Vulnerability Assessment and Management

- Manual and automated security testing of Web applications, APIs, and Mobile Applications.

- Static and Dynamic testing (SAST & DAST) of thick clients / applications

- Develop Proof-of-Concept (PoC) for the identified vulnerabilities.

- Provide remediation guidance to identified vulnerabilities.

- Incorporate metrics providing comprehensive insight about the security posture of an organization that will help senior management with decision making.

- Build and maintain strong relationships with key stakeholders.

Technical Skillsets (Mandatory) :

- Strong analytical and problem-solving skills and the ability to explain complex technical concepts in a clear and concise manner and to provide remediation recommendations.

- Knowledge of / or experience with both Enterprise and open-source offensive security tools for reconnaissance, scanning, exploitation

- Sound understanding of security frameworks (OWASP Top 10, NIST, MITRE ATT&CK)

- Hands on experience in Penetration Testing

- Experience on VM tool deployment (Qualys/Nessus/Rapid7)

Technical Skillsets (Preferred) :

- Exposure to DevSecOps, Security Architecture review and Network Security assessment would be a bonus.

- Hands-on experience in Red Team Exercises, Threat Hunting, OSINT and Threat Modelling

- Proficiency in a programming language(s) (e.Python, Ruby, Perl, PowerShell)

Non-Technical Skillsets (Preferred) :

- Excellent and effective report writing and verbal communication skills

- Estimate Project efforts and meet delivery milestones and deadlines

- Deliver results within stipulated time-lines

- Team Player with good interpersonal skills

- Should be able to work independently with minimum and least supervision in complex, dynamic and challenging environment.

- Self-driven and self-managed technical team leader.

- Communicate project requirements and influence stakeholders with minimal supervision