Information Security Analyst - I

Accountabilities: Conduct vulnerability assessments and penetration testing across web applications, mobile applications, cloud infrastructure, SaaS applications, network devices, and open-source projects.

Perform black-box and white-box security testing to identify vulnerabilities, including business logic issues and technical weaknesses.

Develop, test, and improve security rule sets for dynamic application security testing (DAST) solutions.

Analyze security findings and provide actionable recommendations to help clients remediate vulnerabilities.

Collaborate directly with clients through calls and written communication to explain security issues and remediation approaches.

Support clients in defining clear action plans for vulnerability resolution and improving their security practices.

Maintain and improve vulnerability management systems and processes.

Stay updated on emerging cybersecurity threats, techniques, and industry best practices.

Contribute to continuous improvements in security testing methodologies and internal tools.

Requirements:

1-3 years of experience performing penetration testing or vulnerability assessments across multiple environments.

Experience testing web applications, cloud infrastructure, SaaS applications, or other technology assets.

Knowledge of black-box and white-box security testing methodologies.

Ability to identify business logic vulnerabilities and assess complex security risks.

Certification such as CEH, OSCP, or CREST is preferred.

Ability to read and understand code in at least one programming language.

Strong analytical and problem-solving skills with attention to technical details.

Experience communicating directly with customers through calls and emails.

Passion for cybersecurity and willingness to continuously learn new security techniques.

Experience with published CVEs, bug bounty programs, or Capture The Flag (CTF) competitions is a plus.

Benefits:

Fully remote work opportunity with flexibility to work from anywhere.

Opportunity to work on real-world cybersecurity challenges and security research initiatives.

Exposure to advanced penetration testing and vulnerability management practices.

Collaborative startup environment focused on innovation and professional growth.

Opportunity to showcase your expertise while contributing to impactful security solutions.

Learning opportunities in a rapidly evolving cybersecurity field.

Team events and workcation opportunities.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1