Key Responsibilities
- Conduct security research on emerging cyber threats, attack techniques, and vulnerabilities.
- Perform Vulnerability Assessments and Penetration Testing (VAPT) on web applications, mobile applications, APIs, cloud platforms, and internal networks.
- Identify, validate, and document security vulnerabilities with clear reproduction steps and remediation recommendations.
- Analyze security incidents, malware samples, and attack patterns when required.
- Conduct reconnaissance and attack surface mapping for security assessments.
- Research and test new security tools, frameworks, and methodologies.
- Prepare detailed technical and executive-level security reports.
- Assist development teams in understanding and mitigating security risks.
- Monitor vulnerability disclosures, CVEs, security advisories, and threat intelligence feeds.
- Participate in responsible disclosure and bug bounty programs where authorized.
- Develop proof-of-concept demonstrations for identified vulnerabilities.
- Support compliance initiatives including ISO 27001, SOC 2, PCI-DSS, and other security frameworks where applicable.
- Maintain confidentiality of client information and assessment results.
Required Skills
- Strong understanding of cybersecurity principles and attack methodologies.
- Knowledge of:
- Web Application Security (OWASP Top 10)
- API Security
- Mobile Application Security
- Network Security
- Cloud Security
- Experience with vulnerability assessment and penetration testing tools.
- Familiarity with:
- Burp Suite
- Nmap
- Wireshark
- Nessus
- Metasploit
- OWASP ZAP
- Understanding of authentication, authorization, encryption, and secure coding practices.
- Ability to analyze logs, traffic captures, and security events.
- Strong technical report-writing skills.
- Excellent analytical and problem-solving abilities.
Pay: Up to Rs1.00 per month
Work Location: In person