Security Analyst VAPT

Hi, We have an immediate requirement for Security Analyst-VAPT with our organization SHI Locuz Enterprise Solutions Pvt Ltd. PFB job details: Work Location - Hyderabad Experience - 4+years Please find below the JD :- Current knowledge of application security best practices, common exploits and threat landscape. > Assess an organization's risk posture based on the resident vulnerabilities and prioritize courses of action to risk. > Experience with application threat modeling or other risk identification techniques> Good Knowledge of security management, network & protocols, data and application security solutions. > Manage the life cycle of application security vulnerabilities, from identification to validation ,remediation and perform a deep technical analysis of vulnerabilities and associated exploits. > Provide technical support to system owners to propose mitigation and remediation solutions to identified vulnerability and security issues for different security tools. > Application Code review and reporting of the vulnerabilities and Experience with one or more enterprise vulnerability scanning tools. > Solid Understanding of vulnerability and threat management and importance of strong process and documentation of VM Workflow. > Identifying opportunities for automation, process integration, and Excellent written and verbal communication skills to draft and present comprehensive vulnerability assessment reports.> Nice to have knowledge about Kubernetes, along with the container build pipeline and repository platform. > Identify, test, and report security weaknesses in networks, systems and applications.  Strong understanding of network and system security concepts, including:

• Network protocols (TCP/IP,
• Operating systems (Windows, Linux, macOS)
• Database systems (MySQL, Oracle, SQL Server)
• Web applications and frameworks

 Proficiency in using vulnerability scanning tools (e.g., Nessus, OpenVAS, Qualys) and penetration testing frameworks (e.g., OWASP ZAP, Metasploit).  Knowledge of programming languages (e.g., Python, Ruby) for automation and scripting.   Familiarity with security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework).

• Source Code Review
• Relevant certifications (e.g., CISSP, CEH, OSCP) are preferred.