Security Analyst
Job Title: Security Engineer / Analyst
Location: Bengaluru, Karnataka, India
Commitment: Full-time
Industry: Technology & Engineering
Seniority Level: Associate
Experience: Up to 3 years
Overview
We are looking for an experienced Security Engineer / Analyst to join our cybersecurity team. The ideal candidate will have deep expertise in ethical hacking, vulnerability assessment, and security analysis to identify and remediate security weaknesses in networks, applications, and systems.
Key Responsibilities
Execute Breach and Attack Simulation (BAS) and adversary emulation activities aligned with the MITRE ATT&CK framework.
Conduct attack simulations covering ransomware, malware, credential attacks, lateral movement, and other adversarial techniques.
Design, customize, and execute SafeBreach attack scenarios to validate the effectiveness of security controls.
Perform web application, API, mobile, and infrastructure penetration testing to identify, validate, and assess security vulnerabilities.
Schedule recurring attack simulations and track improvements in the organization's security posture.
Plan and execute Red Team exercises to simulate real-world attack scenarios and threat actor behaviours.
Conduct Purple Team exercises in collaboration with Blue Teams and SOC analysts to validate detection, investigation, and response capabilities.
Assess the effectiveness of security controls, including WAF, EDR/XDR, SIEM, IDS/IPS, IAM, firewalls, and network security solutions.
Collaborate with SOC and SIEM teams to validate log ingestion, detection rules, alert generation, and security monitoring capabilities.
Identify gaps in security prevention, detection, and response mechanisms and recommend appropriate improvements.
Evaluate security solutions against emerging threats, vulnerabilities, and adversarial attack techniques.
Prepare detailed technical assessment reports and executive-level summaries, including risk ratings, supporting evidence, and remediation recommendations.
Coordinate with development, infrastructure, and security teams to facilitate vulnerability remediation and security control improvements.
Perform retesting and follow-up validation to confirm remediation effectiveness and verify improvements in security controls.
Stay up to date with emerging threats, Common Vulnerabilities and Exposures (CVEs), attack techniques, and cybersecurity trends.
Required Qualifications
Up to 3 years of experience in penetration testing, security control validation, ethical hacking, or offensive security.
Strong understanding of security testing methodologies, tools, frameworks, and attack simulation techniques.
Knowledge of infrastructure security, including networking, Active Directory, Windows/Linux systems, and cloud environments.
Familiarity with BAS platforms such as SafeBreach, AttackIQ, or equivalent tools.
Understanding of security frameworks, including MITRE ATT&CK and the Cyber Kill Chain.
Hands-on experience with manual and automated security testing techniques.
Knowledge of web application, mobile application, and API security testing, including OWASP Top 10, business logic vulnerabilities, and authentication and authorization flaws.
Proficiency in scripting languages such as Python, PowerShell, or Bash for security testing and automation.
Familiarity with secure coding practices, application security principles, and common vulnerability remediation techniques.
Ability to research emerging cyber threats, ransomware campaigns, and adversary Tactics, Techniques, and Procedures (TTPs).
Ability to map threat intelligence to MITRE ATT&CK techniques and develop relevant attack simulation scenarios.
Experience conducting controlled attack simulations to assess organizational readiness and validate security controls against real-world attack techniques.
Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Preferred Qualifications
Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud Platform (GCP).
Experience in bug bounty programs or vulnerability research.
Relevant security certifications such as OSCP, OSWE, CPENT, CRTP, CEH, eJPT, or GPEN are highly preferred.
Benefits & Perquisites
Work-Life Balance
Flexible and hybrid work schedules.
Diverse leave options.
Supplementary allowances and compensatory days off for specific work demands.
Well-Being & Family Protection
Comprehensive medical coverage for spouses, children, and parents/in-laws.
Voluntary top-up plans and OPD coverage.
Day care services and access to health coaches.
Employee Assistance Program offering free, unbiased, and confidential expert consultations for personal and professional issues.
Wheels and Meals
Free transportation and cafeteria facilities.
Diverse menu options, including breakfast, lunch, snacks, and beverages, with customizable and health-conscious choices.
Certification & Training
Sponsored training for specialized certifications.
Investment in employee development through labs and learning platforms.
Relocation Support
- Relocation support and reimbursement for newly hired employees relocating to Bengaluru, India.