Security Analyst

Security Analyst Job in Mysuru, Karnataka

dnA Consulting is seeking a skilled Security Analyst to join our Information Security/Cyber Security team in Mysuru. This is a full-time position for professionals with 3-6 years of experience. The ideal candidate will play a crucial role in designing, implementing, and maintaining a robust security posture across our infrastructure and applications. You will leverage hands-on experience in vulnerability management, application security, cloud security, and incident response. This role involves close collaboration with infrastructure and development teams to embed security throughout the Software Development Life Cycle (SDLC) and enterprise environments.

Key Responsibilities:

• Vulnerability & Risk Management: Lead enterprise-wide vulnerability scanning and triage using tools like Tenable.io and Qualys. Analyze vulnerabilities, prioritizing remediation based on CVSS scores, exploitability, and business impact. Ensure compliance with security standards such as CIS Benchmarks, NIST CSF, and ISO 27001.
• Application Security (AppSec): Integrate SAST, DAST, and SCA security testing into CI/CD pipelines. Conduct secure code reviews focusing on OWASP Top 10 and SANS Top 25. Participate in threat modeling activities during application design phases.
• Security Infrastructure & Operations: Manage cloud security controls across AWS and Azure environments. Handle identity and access management using Entra ID / Azure AD. Support incident response, forensic investigation, and root cause analysis. Automate repetitive security tasks using Python or PowerShell scripting.

Required Skills:

• Experience in Security Operations, Application Security, or DevSecOps environments.
• Strong understanding of vulnerability management and risk assessment.
• Hands-on experience with SAST, DAST, and SCA tools.
• Experience with SIEM platforms like Splunk or Microsoft Sentinel.
• Knowledge of cloud security concepts in AWS or Azure.
• Strong understanding of secure coding practices and SDLC security.
• Good analytical, troubleshooting, and incident handling skills.
• Strong communication and stakeholder management abilities.

Preferred Skills:

• Experience with Burp Suite, Metasploit, and threat modeling frameworks.
• Exposure to DevSecOps and CI/CD security integration.
• Experience in automation using Python or PowerShell.
• Security certifications such as GSEC or CISSP are preferred.

Qualifications:

• Bachelors degree in Computer Science, Information Technology, Cyber Security, or a related field.

Technical Skills: Cyber Security, Information Security, Application Security, DevSecOps, Vulnerability Management, Risk Assessment, SIEM, Splunk, Microsoft Sentinel, Burp Suite, Metasploit, SAST, DAST, SCA, Secure Code Review, OWASP, Threat Modeling, AWS Security, Azure Security, Entra ID, Incident Response, Python, PowerShell, CI/CD Security, Security Automation.

Key Competencies: Analytical Thinking, Problem Solving, Cross-functional Collaboration, Risk Management, Communication Skills.

Interested candidates in Mysuru and surrounding areas are encouraged to share their resumes to careers@true-hr.co.