Jr. Security Analyst

INNsight.com is looking for a Junior Information Security Analyst who is familiar with web application security, has experience in using popular Penetration Testing tools, and is either trained or certified in Information Security from a reputed Information Security institute or course. At INNsight, you will be responsible for identifying security holes and addressing security issues to ensure that our various services and apps are reasonably secure against common and popular exploits and vulnerabilities. We are looking for a sharp, talented individual with unquestionable integrity who has experience in at least LAMP Web application security, with knowledge of Android and iOS App security being desirable.

Job Location:

Malad (W), Mumbai, INDIA.

Responsibilities and Duties:

As a leading technology startup and a rising technology partner in the Hospitality Industry in the USA, we build websites, web applications, integrations with Online Travel Agents, use a wide variety of APIs and build mobile and desktop applications to serve the needs of the Hospitality Industry. We also provide SEO and Online Marketing services to the Hospitality Industry. We use a mix of technologies and platforms including LAMP, AWS, Rackspace Cloud, Google services, and other third-party APIs from reputed companies in the Hospitality Industry. We use all common platforms - Windows, Linux (Ubuntu & CentOS), macOS, iOS, Android.

• Performing vulnerability assessments and penetration testing (VA&PT).
• Contributing to the security preparedness of the organization by way of applying and maintaining standards and processes compliant with common standards including PCI and regulations including GDPR.
• Working effectively in both individual capacities and with teams.
• Setting up your own tools and environments, demonstrating attacks and suggesting remedies, coordinating with other teams when handling existing environments, and communicating clearly and early, on both discovered and potential security issues.

Knowledge and Skills / What you know:

Basics: Networks, TCP/IP, OSI Model, HTTP, SSL, TLS, Encryption, Linux security, Ports, Firewalls, LAMP web application architecture, OWASP Top 10, Android security model, iOS Security Model, Data Privacy

Regulations & Standards: OWASP, PCI DSS, GDPR

Languages: Perl / Python / Java (at least 1), Bash (must)

Tools: One of VA/PT tools mentioned above; Wireshark / tshark; Postman / Browser Developer tools; Openssl; GPG; Greasemonkey or similar scripting tool

Required Experience, Skills and Qualifications:

• Performing Vulnerability Assessments and Penetration Tests on at least LAMP web applications, with experience in Android and iOS apps being desirable.
• Writing stress/load tests for web applications.
• Writing code or scripts to automate such testing wherever possible
• Using at least one of the following Penetration Testing tools: Kali Linux, Metasploit, Open Vulnerability Assessment System (OpenVAS), Zed Attack Proxy (ZAP), Android Open Pwn Project (AOPP), BurpSuite, Acunetix. Arachni, W3af, Skipfish, BeEF.
• MySQL security analysis and testing using one of SQLMap, SQLNinja.
• Training and/or Certification in Information Security from a reputed Information Security institute or course is preferred.

Benefits:

• Company Perks
• Trips
• Bonuses
• Insurance