Associate Analyst II - Information Security / Senior Analyst I

Job Summary

Accops is looking for a hands-on Security Penetration Tester to identify, validate, and help remediate security vulnerabilities across our products, applications, APIs, infrastructure, and networks. Reporting To: Team Lead. The ideal candidate should have strong practical experience in Vulnerability Assessment & Penetration Testing (VAPT), application and network security testing, vulnerability exploitation, and security assessment methodologies. You will work closely with Engineering, Product, and Security teams to identify security weaknesses and improve the overall security posture of Accops products.

Technical Skills Required

• 3+ years of hands-on experience in Penetration Testing / VAPT / Application Security.
• Strong knowledge of:
  • Web Application Security
  • API Security
  • Network Security
  • Infrastructure Security
  • Windows & Linux Security
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
• Hands-on experience with penetration-testing tools such as:
  • Burp Suite
  • Nmap
  • Metasploit
  • Wireshark
  • Nessus / OpenVAS
  • SQLMap
  • Nikto
  • Kali Linux
• Understanding of common vulnerabilities such as:
  • SQL Injection
  • XSS
  • CSRF
  • SSRF
  • Command Injection
  • Authentication/Authorization issues
  • Privilege Escalation
  • Idor/bola
  • Security Misconfiguration
  • Insecure Deserialization
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports and network protocols.
• Ability to perform vulnerability validation and manual exploitation rather than relying only on automated scanners.
• Good scripting/programming knowledge in Python, Bash, PowerShell, or similar languages.
• Strong analytical and problem-solving skills.
• Ability to create clear technical security reports and communicate findings to engineering teams.

Good To Have

• Experience testing enterprise/security products, SaaS applications, endpoint solutions, VPN/ZTNA/VDI/virtualization platforms.
• Knowledge of virtualization technologies such as VMware, Hyper-V, or KVM.
• Experience with cloud security testing.
• Experience with source-code review / secure code review.
• Knowledge of Active Directory and Windows domain security.
• Experience with threat modeling and security assessment methodologies.
• Familiarity with CVSS scoring and CVE analysis.
• Experience with security automation and scripting.

Certifications - Preferred

• OSCP
• OSWE
• CEH
• eJPT
• PNPT
• CREST certifications
• Security+ or equivalent security certifications

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.