Engro Technologies

Engro - Application Security Analyst - Penetration Testing/Vulnerability Management

Bengaluru, KA, IN

about 1 month ago
Save Job

Summary

We are looking for an- "Application Security Analyst"- with- 2-3 years of experience in IT and security- to strengthen our security team.

The ideal candidate will focus on- securing web and mobile applications (Android/iOS)- by conducting- penetration testing, vulnerability assessments, API security reviews, and ensuring compliance with security best practices.

Job Summary

Role : Application Security Analyst.

Exp : 2-3 Yrs.

Location : Bangalore.

Looking for Immediate to 30 Days NP Professionals.

Key Responsibilities

Application Security & Penetration Testing :

  • Conduct security assessments for web, mobile (Android/iOS), and APIs.
  • Identify, exploit, and remediate OWASP Top 10 vulnerabilities.
  • Perform manual and automated security testing to uncover security risks.
  • Conduct secure code reviews to detect application security flaws.

Mobile Security (Android & IOS)

  • Perform static and dynamic analysis of Android/iOS applications.
  • Identify security risks such as insecure data storage, API vulnerabilities, and jailbreak/root detection bypass.
  • Utilize tools like MobSF, Frida, Burp Suite, Objection, Drozer, Jadx, and apktool.
  • Validate applications against OWASP Mobile Top 10 security risks.

API Security & Secure Development

  • Perform API penetration testing using Burp Suite, Postman, OWASP ZAP.
  • Identify critical vulnerabilities such as Broken Authentication, Excessive Data Exposure, and IDOR.
  • Collaborate with developers to implement secure coding practices and remediation strategies.

Vulnerability Management & Compliance

  • Conduct vulnerability assessments using tools like Nessus, Acunetix, Nexpose, Rapid7, and Qualys.
  • Ensure compliance with ISO 27001, SOC2, GDPR, and other regulatory frameworks.
  • Work closely with development teams to remediate security vulnerabilities.

Required Skills & Qualifications

  • Bachelor's degree in Computer Science, Information Security, or a related IT field.
  • 2-3 years of experience in IT, with at least 1-2 years focused on Application Security & Penetration Testing.
  • Strong understanding of OWASP Top 10 (Web & Mobile) vulnerabilities.
  • Hands-on experience with security tools such as Burp Suite, MobSF, Frida, Objection, Drozer, Jadx, apktool.
  • Proficiency in secure code review (Java, Swift, Kotlin, JavaScript).
  • Expertise in API Security Testing and secure development best practices.
  • Strong analytical, problem-solving, and communication skills.

Preferred Qualifications

  • Security certifications such as OSCP, CEH, eJPT, OSWE, GMOB (preferred).
  • Experience with bug bounty programs or responsible disclosure initiatives.

Compensation & Benefits

  • Competitive salary based on experience.
  • Career growth opportunities in Application Security & Ethical Hacking.
  • Health & wellness benefits.
  • Access to continuous learning, certifications, and security training programs.
  • If you're looking for an opportunity to build, innovate, and grow, this role is for you!.

(ref:hirist.tech)

How strong is your resume?

Upload your resume and get feedback from our expert to help land this job