vulnerability assessment analyst

MTBC CareCloud

<p><b>Job Summary</b></p><p>The VAPT Analyst will be responsible for conducting security testing of applications, systems, and networks to identify vulnerabilities, assess risks, and recommend remediation measures. This role requires strong technical expertise in penetration testing, vulnerability assessment tools, and knowledge of security frameworks and methodologies.</p><p><b>Key Responsibilities</b></p><ul><li>Conduct Vulnerability Assessment and Penetration Testing (VAPT) on websites, APIs, and mobile applications (Android/iOS).</li><li>Identify, analyze, and document security vulnerabilities, threats, and risks.</li><li>Prepare detailed technical and executive-level reports with findings, risk ratings, and remediation recommendations.</li><li>Collaborate with IT, DevOps, and development teams to remediate vulnerabilities.</li><li>Maintain knowledge of OWASP Top 10, NIST, ISO 27001, and other cybersecurity frameworks.</li><li>Stay updated with the latest security tools, vulnerabilities, and penetration testing techniques.</li><li>Assist in compliance audits and security policy implementation when required.</li></ul><p><b>Requirements</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, Cyber Security, or related discipline.</li><li>1&ndash;2 years of experience in vulnerability assessment, penetration testing, or related roles.</li><li>Hands-on experience with tools such as Burp Suite, Nessus, Metasploit, Nmap, Kali Linux, etc.</li><li>Strong knowledge of OWASP, NIST, ISO 27001, and secure coding practices.</li><li>Excellent reporting and communication skills.</li><li>Candidates with relevant certifications will be preferred.</li></ul><p>Job Type: Full-time</p><p>Application Question(s):</p><ul><li>What is your current salary?</li><li>What is your expected salary?</li></ul><p>Work Location: In person</p>

VAPT Analyst

ARUP Laboratories

<p></p><div><p><b>Schedule</b>:<br>
Monday - Friday (40 hrs/wk)<br>
8:00 AM - 5:00 PM</p>
<p><b>
Department</b>: IT General - 210</p>
<p><b>
Primary Purpose</b>:</p>
<p>
The Vulnerability Analyst conducts extensive research on newly discovered vulnerabilities in operating systems, application software, infrastructure, and firewalls. Serves as a senior technical leader within the Security Operations Center (SOC), responsible for overseeing enterprise-wide vulnerability management strategies. This role investigates, analyzes, and develops methods for exploiting such vulnerabilities. The analyst performs Security Impact Analysis (SIA) to determine how proposed or completed changes to information systems affect overall security. This process involves assessing potential vulnerabilities and risks introduced by modifications to components such as operating systems, networks, software, and security controls. The Vulnerability Analyst reports directly to the Security Operations Center (SOC) Manager.</p>
<p><b>
About ARUP</b>:</p>
<p>
ARUP Laboratories is a national clinical and anatomic pathology reference laboratory and an enterprise of the University of Utah and its Department of Pathology. Based in Salt Lake City, Utah.</p>
<p>
ARUP proudly hires top talent to create a work environment of diversity, professional growth and continuous development. Our workforce is committed to the important service we provide to over one million patients each month. We always strive for excellence and have a strong desire to have involvement with the advances in medicine and the role laboratory services plays within each patient&rsquo;s life. We never forget that there is a patient behind every specimen we receive.</p>
<p>
We are looking for individuals who want to contribute to ARUP's culture of accountability, integrity, service, and excellence. Consider joining our dynamic team.</p>
<p><b>
Essential Functions</b>:</p>
<p>
Lead advanced cyber vulnerability assessments of applications, systems, vendor IT networks, and cloud architecture.</p>
<p>
Analyze and validate scan results, correlate findings, and determine severity and risk impact to prioritize remediation efforts.</p>
<p>
Maintain and update vulnerability tracking systems, dashboards, and compliance reports.</p>
<p>
Develop and present reports, briefs, and metrics to communicate vulnerability status, remediation progress, and compliance standing to leadership.</p>
<p>
Stay informed about emerging vulnerabilities, CVEs, threat intelligence, and cybersecurity best practices.</p>
<p>
Conduct comprehensive risk assessments of IT systems, applications, and business processes, recommending improvements to security controls.</p>
<p>
Maintain detailed risk registers by analyzing threat intelligence and vulnerability data to identify emerging risks.</p>
<p>
Develop and perform cybersecurity risk assessments and mitigation strategies.</p>
<p>
Collaborate with administrators, DevOps teams, researchers, Change Approval Board (CAB), and IT Tech Debt Committee to identify, prioritize, and remediate vulnerabilities.</p>
<p>
Lead efforts with remediation teams, system owners, and senior security staff to track and resolve identified vulnerabilities.</p>
<p>
Apply advanced techniques threat modeling, penetration testing, and exploit development techniques to identify risks across on-premises and cloud environments.</p>
<p>
Contribute to recurring cyber vulnerability updates and prepare executive-level summaries of findings for senior leadership.</p>
<p>
Provide subject matter expert support in incident response investigations and provide technical recommendations to strengthen system defenses.</p>
<p>
Develop and deliver training and awareness programs for team members and stakeholders on vulnerability identification, remediation, and secure system design practices.</p>
<p>
Provide expert support to the Security Operations Center (SOC) Tier 1 and Tier 2 Analyst teams as needed in performing threat detection and incident response.</p>
<p><b>
Physical Requirements</b>:</p>
<p>
Stooping: Bending body downward and forward by bending spine at the waist.</p>
<p>
Reaching: Extending hand(s) and arm(s) in any direction.</p>
<p>
Mobility: The person in this position needs to occasionally move between work sites and inside the office to access file cabinets, office machinery, etc.</p>
<p>
Communication: The person in this position will work in a highly collaborative environment which requires frequent, clear, and professional communication with others.</p>
<p>
PPE: Biohazard laboratory environment that requires use of personal protective equipment in accordance with CDC and OSHA regulations and company policies.</p>
<p>
ARUP Policies and Procedures: To conduct self in compliance with all ARUP Policies and Procedures.</p>
<p>
Sedentary Work: Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.</p>
<p>
Fine Motor Control: Picking, pinching, typing or otherwise working on computer equipment.</p>
<p>
Vision: Having close, far, and peripheral visual acuity to perform a variety of tasks such as making general observations of depth and distance.</p><p></p><h4 class="jobSectionHeader"><b>
Experience</b></h4>
Required<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field</li><li>
Six (6) years of cybersecurity experience, including at least 4 years focused on vulnerability analysis, penetration testing, or cyber risk management</li><li>
Strong understanding of security frameworks (e.g., NIST, MITRE ATT&amp;CK)</li><li>
Experience with vulnerability scanning tools</li><li>
Experience with EDR solutions</li><li>
Excellent communication, analytical, and problem-solving skills</li><li>
Deep knowledge of NIST, ISO/IEC 27001, HITRUST frameworks</li></ul>
Preferred<ul><li>
Relevant certifications (e.g., CISSP, CISM, CEH, CND, GCIA, GCIH)</li><li>
Experience in healthcare or laboratory environments preferred</li><li>
Master&rsquo;s degree in Cybersecurity, Information Technology, or related field</li></ul><h4 class="jobSectionHeader"><b>
Education</b></h4>
Required<ul><li>
Bachelor's Degree or better in Cybersecurity or related field</li></ul>
Preferred<ul><li>
Master's Degree or better in Cybersecurity or related field</li></ul><p>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities<br>
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.</p></div>

Vulnerability Analyst IV

StoneX Group

<div>Overview:
<div>
Connecting clients to markets &ndash; and talent to opportunity with 4,300 employees and over 400,000 retail and institutional clients from more than 80 offices spread across five continents, we&rsquo;re a Fortune-100, Nasdaq-listed provider, connecting clients to the global markets &ndash; focusing on innovation, human connection, and providing world-class products and services to all types of investors.</div><div>
Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, The StoneX Group is made up of four segments that offer endless potential for progression and growth.</div><div></div><div><br>
As a Vulnerability Management Senior Analyst, you will be responsible for supporting a new Vulnerability Management function at StoneX. You will work closely with the Vulnerability Management Manager to identify, assess risks, and monitor security vulnerabilities within SNEX's information technology infrastructure and systems.</div><div></div><div><br>
This is an individual contributor hybrid position that requires 4 days in the office per week. If your resume doesn&rsquo;t perfectly line up with the role responsibilities and qualifications, we encourage you to apply anyway. You could be one step away from work that will transform your life and career.</div>
Responsibilities:
<div><b>
Key Responsibilities:</b></div><ul><li>
Conduct detailed vulnerability assessments to identify, analyze, potential vulnerabilities in software, hardware, and network systems looking at the collected data.</li><li>
Develop and implement comprehensive strategies to evaluate the security of critical systems and infrastructure.</li><li>
Coordinate with the teams responsible for patching to ensure Critical updates are process timely</li><li>
Analyze and respond to Vulnerability incidents and respond with effective mitigation techniques and root cause analysis.</li><li>
Collaborate with IT and network teams to enhance the overall security posture of the organization through strategic improvements and updates.</li><li>
Provide technical guidance and training to team members and other departments on Vulnerability Management practices and processes.</li><li>
Basic knowledge of MITRE ATT&amp;CK so that can understand when engaging with SOC on potential vulnerabilities and how they interact with MITRE.</li><li>
Stay updated with the latest security threats, technologies, and trends to continuously improve the security measures.</li><li>
Prepare detailed reports and presentations for both technical and non-technical audiences, outlining security issues, mitigation plans, and ongoing project results.</li><li>
Document, prioritize and formally report asset and vulnerability state, along with remediation recommendations and validation.</li><li>
Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging</li></ul><div></div><div><b><br>
This job might be for you if:</b></div><div><ul><li>
You enjoy learning about cyber security, threats and vulnerability and proactively protecting an organization.</li><li>
You love taking on difficult challenges, finding creative solutions, and stepping outside your comfort zone to learn and grow.</li><li>
You do not get flustered easily. If you do not know the answer, you will use the available resources to try to find the answer first.</li><li>
You enjoy working on a team or individually to fulfill a mission.</li><li>
You are fluent in English.</li><li>
You possess excellent verbal and writing skills.</li><li>
You enjoy reading, research, and writing.</li><li>
You have a radical curiosity.</li><li>
You are motivated and driven. You volunteer for new challenges without waiting to be asked.</li></ul></div>
Qualifications:
<p><b>
To land this role:</b></p><p>
You need to exhibit a high degree of emotional intelligence, empathy, and the ability to learn quickly. The ability to write well is a requirement of this job.</p><p></p><p><b><br>
Qualifications:</b></p><ul><li>
Bachelor's degree in computer science/information technology/Cybersecurity, or a related field or equivalent experience</li><li>
Minimum of 4-6 years of experience in cybersecurity, specifically in vulnerability assessments and penetration testing.</li><li>
Relevant certifications such as CompTIA Security+ and Certified Vulnerability Assessor or equivalent VAPT certifications.</li><li>
Proven expertise in using a variety of security testing tools and software. VM tools like Rapid7 Insight VM, Qualys, Tenable etc.</li><li>
Excellent problem-solving and analytical skills and critical thinking</li><li>
Strong communication skills, both written and verbal, with the ability to produce clear and concise reports.</li><li>
Ability to work independently and as part of a team in a fast-paced, high-pressure environment.</li><li>
Commitment to training, self-study and maintaining proficiency in the Vulnerability Management domain.</li></ul><p></p><p><b><br>
Preferred Qualifications</b></p><ul><li>
Experience in Incident Response, Vulnerability Management, Security Operations</li><li>
Good Business communication skills, both written and verbal, as this job requires to coordinate with various Stakeholders</li><li>
Excellent Logical and Critical thinking. Need to be Analytical.</li></ul><p></p><p><b><br>
Working environment:</b></p><br>
<p></p><ul><li>
Hybrid, 4 days mandatory from office</li><li>
Travel Requirements (if applicable)</li></ul></div><div></div>

IT Vulnerability Management Analyst I

<div></div><div><div><div><div><ul><div>3 - 5 Years</div>
<div></div><div>2 Openings</div>
 <div>Kochi</div></ul></div><p></p><div><br>
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader"><b>Role description</b></h3>
<div><p>As a key member of the Endpoint Security team, the candidate will support daily operations related to endpoint security and vulnerability management. The role requires a motivated individual with strong coordination, analytical, and communication skills to manage reconciliations, incident tracking, and cross-functional collaboration. The candidate will ensure effective security controls, compliance, and hygiene are maintained across the organization.</p>
<h3 class="jobSectionHeader"><b>
Key Responsibilities</b></h3>
<ul>
<li><p>Perform daily operations for endpoint security and vulnerability management, including system reconciliations, compliance monitoring, hygiene tracking, and report generation.</p>
</li>
<li><p>Support the administration, monitoring, and maintenance of endpoint security tools and associated platforms.</p>
</li>
<li><p>Execute routine operational tasks such as policy validation, configuration checks, and system health monitoring.</p>
</li>
<li><p>Collaborate with internal teams (Technology, Service Management, Risk &amp; Audit, Application Owners, Platform Support) to track and resolve incidents, service requests, and change tickets.</p>
</li>
<li><p>Conduct regular asset and vulnerability reconciliations, highlighting discrepancies and initiating resolution through appropriate channels.</p>
</li>
<li><p>Maintain documentation, create knowledge base articles, and contribute to process and training materials.</p>
</li>
<li><p>Validate operational metrics related to cyber hygiene and vulnerability management.</p>
</li>
<li><p>Escalate critical issues promptly and track them through to closure.</p>
</li>
</ul><h3 class="jobSectionHeader"><b>General and Technical Skills</b></h3>
<ul>
<li><p>Strong coordination, organizational, and multitasking abilities.</p>
</li>
<li><p>Minimum 1 year of experience in IT, technology operations, or networking.</p>
</li>
<li><p>Excellent written and verbal communication skills.</p>
</li>
<li><p>Analytical problem-solving skills with attention to detail and thorough documentation.</p>
</li>
<li><p>Proficiency with Microsoft Office tools, particularly Excel for data analysis and reporting.</p>
</li>
<li><p>Working knowledge of Active Directory and basic networking concepts.</p>
</li>
<li><p>Collaborative mindset with the ability to share knowledge and train peers.</p>
</li>
</ul><h3 class="jobSectionHeader"><b>Specialized Technical Skills (Preferred)</b></h3>
<ul>
<li><p>Familiarity with IT service management tools (e.g., ServiceNow, Remedy, Jira Service Desk).</p>
</li>
<li><p>Awareness of vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).</p>
</li>
<li><p>Understanding of endpoint security technologies, compliance reporting, and operational metrics.</p>
</li>
<li><p>Experience in documenting and improving operational processes.</p>
</li>
<li><p>Basic ability to write or interpret SQL or KQL queries for data analysis and reporting.</p>
</li>
<li><p>Applied knowledge of asset management and reconciliation processes in security domains.</p>
</li>
<li><p>Familiarity with antivirus/antimalware tools and compliance best practices.</p>
</li>
</ul></div><h3 class="jobSectionHeader"><b>Skills</b></h3>
<div><p>Networking,Microsoft Office,Information Technology</p></div></div></div></div><p></p>
<br><div><h3 class="jobSectionHeader"><b>About UST</b></h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

Endpoint Security & Vulnerability Management Analyst

<div><p><b>Position Type :
</b></p>Full time<p><b>
Type Of Hire :
</b></p>Experienced (relevant combo of work and education)<p><b>
Education Desired :
</b></p>Bachelor of Computer Engineering<p>
At FIS, you&rsquo;ll have the chance to tackle some of the most challenging and impactful issues in financial services and technology. Our people are our greatest strength, and we foster a culture that is open, collaborative, entrepreneurial, passionate&mdash;and yes, fun!</p><p></p><p><b>
About the Team</b></p><p>
Join a dynamic team of innovative professionals working on cutting-edge projects at the world&rsquo;s largest global provider of financial technology solutions. This is your opportunity to make an impact in a fast-paced, growth-oriented environment.</p><p></p><p><b>
What You&rsquo;ll Be Doing</b></p><ul><li>
Identify and assess vulnerabilities; collaborate across teams to implement effective countermeasures.</li><li>
Monitor and respond to new vulnerabilities detected by internal and external scanners.</li><li>
Triage, troubleshoot, and validate scanner findings; coordinate with internal teams for resolution.</li><li>
Track and manage remediation efforts for identified vulnerabilities.</li><li>
Perform regular patching, maintenance, and system/application upkeep.</li><li>
Partner with compliance teams to meet regulatory and audit requirements.</li><li>
Develop and report meaningful metrics to strengthen the Vulnerability Management Program.</li><li><b>
Engage in rapid response activities to identify potential attack surfaces vulnerable to emerging threats and zero-day exploits.</b></li></ul><p></p><p><b>
What You Bring</b></p><ul><li>
Should be okay with 24/5 rotational shift.</li><li><b>
Experience:</b><ul><li>
0-2 years in Vulnerability Management Operations, including tools like Rapid7, Qualys, ASV coordination, and dynamic application scanning.</li><li>
Working knowledge of open-source tools like <b>Nuclei.</b></li><li>
Hands-on experience with Burp Suite for web application security testing and vulnerability analysis.</li></ul></li><li><b>
Technical Skills:</b><ul><li>
Strong understanding of OS platforms (Windows, RedHat, CentOS, etc.).</li><li>
Familiarity with network devices (Cisco, AIX, Big5, Citrix, etc.).</li><li>
Basic <b>Python</b> and <b>Bash scripting</b> skills.</li><li>
Working knowledge of SQL queries and PCI DSS compliance.</li></ul></li><li><b>
Operational Expertise:</b><ul><li>
Hands-on with scanning, analyzing results, manual verification, and remediation coordination.</li></ul></li><li><b>
Soft Skills:</b><ul><li>
High passion for security and innovation.</li><li>
Strong problem-solving abilities and cross-functional collaboration skills.</li><li>
Excellent written and verbal communication; strong interpersonal skills.</li></ul></li><li><b>
Shift Readiness:</b> Ability to work in a 24/5 rotational shift.</li></ul><p></p><p><b>
Certifications (Preferred)</b></p><p>
CRTP, EJPT, Security+, CEH or other relevant certifications.</p><p></p><p><b>
What We Offer</b></p><ul><li>
A multifaceted role with significant responsibility and growth opportunities.</li><li>
Access to professional education and personal development programs&mdash;FIS is your ultimate career destination!</li><li>
Competitive salary and benefits.</li><li>
A wide range of career development tools, resources, and opportunities.</li></ul><p></p><p><b>
Privacy Statement</b></p><p></p><p>
FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.</p><p></p><p><b>
Sourcing Model</b></p><p></p><p>
Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.</p><p></p><p>
#pridepass</p></div>

IT Security Analyst I (Vulnerability Management / scanning)

Grant Thornton

<div></div><ul><div>5 - 8 Years</div>
<div></div><div>3 Openings</div>
 <div>Bengaluru</div></ul>
<br><div><h3 class="jobSectionHeader"><b>Role description</b></h3>
<div><p><b>Position Overview</b></p>
<p><b>
We are seeking a highly skilled Network Security Engineer with expertise in Palo Alto firewall administration, Panorama centralized management, Prisma SD-WAN, and Web Application Firewall (WAF) solutions to join our global security team. This role will be responsible for designing, implementing, and maintaining secure, resilient, and optimized network and application security infrastructures across on-premises, cloud, and SD-WAN environments. The engineer will play a critical role in protecting enterprise infrastructure, applications, and data against evolving cyber threats while ensuring compliance with industry standards and regulatory requirements.</b></p>
<p><b>
</b></p><p><b>Key Responsibilities</b></p>
<p><b>
Firewall &amp; Network Security</b></p>
<ul>
<li><b>Administer, configure, and maintain Palo Alto firewalls across global environments using Panorama for centralized policy and configuration management.</b></li>
<li><b>Design and implement firewall policies, NAT rules, VPNs, and security profiles to enforce enterprise security standards.</b></li>
<li><b>Conduct firewall audits, rule base reviews, and risk assessments to ensure secure and efficient configurations.</b></li>
<li><b>Monitor and analyze firewall logs, s, and incidents in collaboration with SOC teams; provide timely remediation.</b></li>
</ul>
<p><b>Prisma SD-WAN Management</b></p>
<ul>
<li><b>Deploy, configure, and manage Palo Alto Prisma SD-WAN infrastructure to ensure secure, optimized, and reliable connectivity across global sites.</b></li>
<li><b>Implement traffic steering, QoS policies, and application-aware routing for performance and security.</b></li>
<li><b>Monitor SD-WAN health, troubleshoot connectivity issues, and optimize network performance.</b></li>
<li><b>Integrate Prisma SD-WAN with cloud security services and enforce Zero Trust principles.</b></li>
</ul>
<p><b>Web Application Firewall (WAF) Management</b></p>
<ul>
<li><b>Deploy, configure, and maintain Web Application Firewalls (WAF) to protect web applications from OWASP Top 10 threats, DDoS, and advanced attacks.</b></li>
<li><b>Implement custom WAF rules and policies for application-specific security requirements.</b></li>
<li><b>Monitor WAF logs and s, investigate anomalies, and coordinate remediation with application teams.</b></li>
<li><b>Integrate WAF solutions with SIEM/SOAR platforms for centralized monitoring and automated response.</b></li>
</ul>
<p><b>Network Architecture &amp; Integration</b></p>
<ul>
<li><b>Support secure network design and architecture reviews for global projects, mergers, and technology deployments.</b></li>
<li><b>Collaborate with IT, Cloud, and Application teams to ensure seamless and secure connectivity across hybrid environments.</b></li>
<li><b>Assist with incident response by providing network and application security expertise during investigations and post-incident reviews.</b></li>
</ul>
<p><b>Automation &amp; Documentation</b></p>
<ul>
<li><b>Develop and maintain automation scripts (Python, Ansible, Terraform) for firewall, SD-WAN, and WAF operations.</b></li>
<li><b>Maintain comprehensive documentation of firewall policies, SD-WAN configurations, and WAF rules.</b></li>
</ul>
<p><b>Compliance &amp; Governance</b></p>
<ul>
<li><b>Ensure compliance with corporate security policies, regulatory requirements, and industry best practices (ISO 27001, SOC 2, NIST).</b></li>
<li><b>Participate in an on-call rotation to support 24/7 global operations.</b></li>
</ul></div>
<h3 class="jobSectionHeader"><b>Skills</b></h3>
<div><p><b>Qualifications &amp; Skills</b></p>
<p><b>
Required:</b></p>
<ul>
<li><b>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience).</b></li>
<li><b>5+ years of experience in network security engineering with strong hands-on expertise in Palo Alto Networks firewalls (PAN-OS, Panorama).</b></li>
<li><b>Experience managing Prisma SD-WAN deployments and policies.</b></li>
<li><b>Hands-on experience with Web Application Firewalls (WAF) and application-layer security.</b></li>
<li><b>Solid understanding of TCP/IP, routing, switching, DNS, VPNs, and network segmentation.</b></li>
<li><b>Familiarity with SIEM, IDS/IPS, and network monitoring tools.</b></li>
<li><b>Strong troubleshooting and analytical skills with ability to work under pressure.</b></li>
<li><b>Excellent communication skills for working in a distributed, multicultural global team.</b></li>
</ul>
<p><b>Preferred:</b></p>
<ul>
<li><b>Palo Alto certifications (PCNSE, PCNSA).</b></li>
<li><b>Experience with cloud security (Azure, AWS) and firewall/WAF integration in cloud environments.</b></li>
<li><b>Knowledge of automation and scripting (Python, Ansible, Terraform) for firewall, SD-WAN, and WAF operations.</b></li>
<li><b>Exposure to Zero Trust architecture and secure access frameworks.</b></li></ul></div></div><p></p>
<br><div><h3 class="jobSectionHeader"><b>About Grant Thornton INDUS</b></h3>
<div>&lsquo;Grant Thornton INDUS&rsquo; comprises GT U.S. Shared Services Center India Pvt Ltd and Grant Thornton U.S. Knowledge and Capability Center India Pvt Ltd. Grant Thornton INDUS is the shared services center supporting the operations of Grant Thornton LLP, the U.S. member firm of Grant Thornton International Ltd. Established in 2012, Grant Thornton INDUS employs professionals across a wide range of disciplines including Tax, Audit, Advisory, and other operational functions. What sets us apart isn&rsquo;t just what we do &ndash; it&rsquo;s how we do it. We support and enable the firm&rsquo;s purpose of making business more personal and building trust into every result. We&rsquo;re collaborators &ndash; obsessed with quality and ready for anything &ndash; who understand the value of strong relationships. Our professionals are well integrated to seamlessly support the U.S. engagement teams, help increase Grant Thornton&rsquo;s access to a wide talent pool, and improve operational efficiencies. Empowered people, bold leadership, and distinctive client service are imbibed in the culture at Grant Thornton INDUS. We are a transparent, competitive, and excellence-driven firm that offers an opportunity to be part of something significant. In addition, professionals at Grant Thornton INDUS serve communities in India through inspirational and generous services to give back to the communities they work in. Grant Thornton INDUS has its offices in two locations in India &ndash; Bengaluru and Kolkata</div></div>

Exposure Management & Attack Path Analysis Specialist

Al Adyat consultancy

<p><b>Job Summary</b><br/>We are seeking a highly skilled and experienced Application Security Expert to join our team. The ideal candidate will have a minimum of 5 years of experience in application security, vulnerability assessment, threat modeling, secure coding practices, and security testing. The candidate should be a graduate in Computer Science, IT, or any technical field.</p><p><b>Responsibilities</b></p><ul><li>Conducting vulnerability assessments and penetration testing on applications.</li><li>Performing threat modeling to identify potential security risks.</li><li>Implementing secure coding practices to ensure the security of applications.</li><li>Conducting security testing to identify and mitigate security vulnerabilities.</li><li>Collaborating with development teams to integrate security into the software development lifecycle.</li><li>Providing guidance and training on application security best practices.</li><li>Developing and maintaining application security policies and procedures.</li></ul><p><b>Qualifications</b></p><ul><li>Minimum of 5 years of experience in application security.</li><li>Bachelor&rsquo;s degree in Computer Science, IT, or any technical field.</li><li>Strong knowledge of vulnerability assessment and penetration testing methodologies.</li><li>Experience with threat modeling and secure coding practices.</li><li>Proficiency in security testing tools and techniques.</li><li>Excellent analytical and problem-solving skills.</li><li>Strong communication and interpersonal skills.</li><li>Ability to work independently and as part of a team.</li></ul><p>Job Type: Full-time</p><p>Pay: QAR15,000.00 - QAR20,000.00 per month</p><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Application Security: 4 years (Required)</li></ul><p>Language:</p><ul><li>Arabic (Required)</li><li>English (Required)</li></ul><p>License/Certification:</p><ul><li>degree in Computer Science (Required)</li></ul>

Appsec (Application Security Expert)

Search 7223+ Vulnerability assessment analyst jobs near you this October. New roles added regularly across leading industries. Apply today.