We are seeking a Cybersecurity Analyst to join our Managed Security Services (MSS) team. The successful candidate will play a key role in monitoring security environments, investigating alerts, responding to security incidents, supporting VAPT activities, and ensuring that assigned security tasks are completed accurately and within defined SLA timelines.
This role is ideal for a cybersecurity professional who is analytical, detail-oriented, responsive, and passionate about detecting and responding to cybersecurity threats.
Responsibilities:
Execute comprehensive penetration tests across Web (APIs, REST, GraphQL), Mobile (iOS & Android), Network infrastructure, and Cloud environments (AWS, Azure, GCP).
Identify and exploit business logic flaws, OWASP Top 10 vulnerabilities, API security risks, network misconfigurations, and cloud IAM permission gaps.
Conduct reverse engineering, static/dynamic analysis, and security assessments on iOS and Android mobile binaries.
Simulate adversary tactics, techniques, and procedures (TTPs) to assess security posture and defensive coverage.
Produce detailed technical reports with proof-of-concept exploits, risk ratings, and actionable remediation steps for technical and non-technical stakeholders.
Assist the Security Operations Center (SOC) with real-time threat monitoring, alert analysis, threat hunting, and SIEM rule tuning.
Conduct digital forensic investigations into security incidents, analyzing disk images, memory dumps, system artifacts, and network logs to establish root cause and attack timelines.
Support incident response teams during active breaches by analyzing attack vectors and containing security threats.
Collaborate with software developers, DevOps, and system administrators to validate security patches and ensure effective vulnerability remediation.
Mentor junior analysts and security engineers in offensive security practices, incident analysis, and threat detection techniques.
Qualifications:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
2-4 years of relevant experience in cybersecurity, security monitoring, incident response, VAPT, or a related role.
Practical experience in analyzing security alerts and investigating cybersecurity incidents.
Working knowledge of VAPT processes and security testing methodologies.
Experience with SIEM, security monitoring, incident management, or ticketing tools.
Good understanding of network security, endpoint security, vulnerabilities, and common cyberattack techniques.
Ability to produce clear, accurate, and well-structured technical reports.
Strong understanding of incident response procedures and security escalation processes.
Ability to work effectively within established security playbooks and operational procedures.