Join our Cyber team as a Consultant specializing in Vulnerability Management and Penetration Testing. You will play a crucial role in protecting valuable organizational assets by preventing cyberattacks. This position is key to embedding robust cyber risk management into strategic development, ensuring effective information and technology risk oversight. Discover more about our Cybersecurity services.

We are seeking a proactive and expert Application & API VAPT Analyst. Your primary responsibility will be identifying, assessing, and validating security vulnerabilities across a range of platforms including web applications, mobile applications, APIs, and cloud-hosted applications. You will be instrumental in conducting security assessments, guiding remediation efforts, and significantly enhancing the organization's overall security posture.

Lead comprehensive vulnerability reduction initiatives within the Mythos Readiness Program, focusing on thorough identification and effective remediation.

Execute detailed vulnerability triage, validation, and risk assessments. You will manage remediation tracking and closure processes using tools such as Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS.

Develop and maintain custom automation scripts, insightful reporting dashboards, and efficient operational workflows. This will enhance vulnerability visibility, improve prioritization, and streamline program reporting.

Possess 2-5 years of practical experience in Application Security and VAPT.

Demonstrate hands-on experience with leading Vulnerability Management and Penetration testing tools, including but not limited to Burp Suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify, Tenable WAS, Tenable.sc, and VMDR.

Exhibit a strong understanding of Cloud Security and Container Security, with the ability to assess risks in cloud-native environments, containerized workloads, Kubernetes platforms, and internet-facing services.

Provide clear, actionable remediation recommendations to application, infrastructure, cloud, and platform teams, ensuring the timely mitigation of critical security exposures.

Effectively manage client and stakeholder communications, including providing status reports, conducting risk discussions, reviewing remediation progress, and managing escalations.

Operate efficiently in a dynamic, fast-paced setting, adhering to strict remediation timelines and driving the resolution of issues to meet P0 remediation SLAs.