Join our cybersecurity team as an Application & API VAPT Analyst. This role is crucial in defending organizations against cyber threats by identifying, assessing, and mitigating security vulnerabilities. You will work with cutting-edge tools and methodologies to enhance our clients' security posture, focusing on proactive risk management and resilient security strategies.

We are seeking a dedicated professional with 3 to 5 years of experience. The ideal candidate will be adept at uncovering weaknesses in web applications, mobile apps, APIs, and cloud environments. Your contributions will directly impact the effectiveness of our security assessments and remediation efforts.

Lead efforts to reduce vulnerabilities through the Mythos Readiness Program, focusing on identification and remediation.

Conduct thorough vulnerability triage, validation, and risk assessments. Track and manage the closure of identified security issues using tools like Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS.

Develop and maintain automation scripts, comprehensive reporting dashboards, and efficient operational workflows. This will enhance vulnerability visibility, improve prioritization, and streamline program reporting for better insights.

A minimum of 4-6 years of practical experience in Application Security and Vulnerability Assessment and Penetration Testing (VAPT).

Proficiency with a range of VAPT tools including Burp Suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify, Tenable WAS, Tenable.sc, and VMDR.

Demonstrated experience in Cloud Security and Container Security, assessing risks within cloud-native applications, containerized systems, Kubernetes, and public-facing services.

Ability to provide clear, actionable remediation recommendations to various technical teams, ensuring swift mitigation of critical security exposures.

Excellent client and stakeholder management skills, including status reporting, risk discussions, and managing escalations.

A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is required.

Preferred certifications include OSCP, OSWE, GWAPT, eWPT, eWPTX, PNPT, CEH, CREST, or CISSP.