The Senior Cybersecurity Analyst is responsible for conducting vulnerability assessments, performing penetration tests, implementing secure development practices, and managing Web Application Firewalls to safeguard web applications. The role demands collaboration with different teams to maintain a strong security stance and involves threat modeling and compliance with security standards.
Job Summary
We are seeking a skilled and passionate Security Professional to join our team. The ideal candidate will be responsible for conducting vulnerability assessments, performing penetration testing, and driving the implementation of secure development practices and management of Web Application Firewalls to protect web applications from cyber threats. This role requires a strong understanding of security frameworks, emerging threats, and the ability to collaborate with cross-functional teams to ensure a robust security posture.
About you Experience & Qualification
- Strong expertise in vulnerability assessment, penetration testing, and security tools.
- Proficiency with WAF solutions such as AWS WAF, Cloudflare, F5, Imperva, etc.
- Ability to configure and customize WAF rulesets. Strong understanding of HTTP/HTTPS protocols.
- Proficiency in frameworks like MITRE ATT&CK, OWASP Top 10, and secure SDLC principles.
- Knowledge of automation tools for static and dynamic code analysis.
- Excellent threat modeling and risk assessment capabilities.
- Familiarity with SCA and SBOM controls.
- Strong documentation and reporting skills for both technical and non-technical audiences.
- Up-to-date knowledge of emerging threats, vulnerabilities, and security technologies.
- Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience).
- 2+ years of experience in cybersecurity, vulnerability management, penetration testing and WAF security.
- Hands-on experience with security standards such as OWASP, NIST, ISO 27001.
It would be great if you also have
- Certifications like OSCP, CEH, or equivalent are highly desirable.
- Experience in incident response and post-breach analysis is a plus.
What will you be doing in this role.
- Conduct comprehensive vulnerability assessments on infrastructure, applications, and networks.
- Perform manual and automated penetration tests on web applications, APIs, mobile apps, and networks.
- Integrate security controls into CI/CD pipelines to ensure secure software development practices.
- Conduct in-depth security reviews of applications, including source code reviews and architecture analysis.
- Engage in threat modelling and risk assessment for critical assets.
- Support the development and implementation of secure coding practices and frameworks.
- Review and implement controls such as SCA (Software Composition Analysis) and SBOM (Software Bill of Materials).
- Deploy and configure WAF solutions such as AWS WAF, Cloudflare, F5 and Imperva.
- Customize WAF rulesets to meet the specific security needs of web applications.
- Monitor WAF security logs and alerts to detect and respond to potential threats.
- Conduct forensic analysis and respond to security incidents involving WAF.
- Document findings, write detailed reports, and present results to technical and non-technical stakeholders.
- Ensure compliance with industry security standards (e.g., OWASP, NIST, ISO 27001).
- Collaborate with cross-functional teams, including IT, DevOps, and compliance.
At Clarivate, we are committed to providing equal employment opportunities for all persons with respect to hiring, compensation, promotion, training, and other terms, conditions, and privileges of employment. We comply with applicable laws and regulations governing non-discrimination in all locations.
Top Skills
Automation Tools
Aws Waf
Cloudflare
F5
Http/Https Protocols
Imperva
Iso 27001
Mitre Att&Ck
Nist
Owasp
Owasp Top 10
Penetration Testing
Sbom
Sca
Secure Sdlc Principles
Security Tools
Vulnerability Assessment
Similar Jobs
Financial Services
As a Senior Lead Cybersecurity Architect at JPMorgan Chase, you will evaluate cybersecurity processes and controls, provide technical guidance, and lead threat modeling efforts. Your role requires collaboration with stakeholders to implement best practices and recommend technology solutions while promoting a culture of diversity and inclusion.
Analytics
As a Senior Cybersecurity Analyst, you will monitor and operate SOC tools, analyze internal events, contribute to incident response efforts, and stay updated on emerging security threats. You will work in a team to enhance security measures and ensure effective operation of security tools to protect the organization.
Top Skills:
Cloud EnvironmentsSecurity ToolsSoc Tools
Analytics
The Senior Cybersecurity Analyst is responsible for conducting vulnerability assessments and penetration tests, managing Web Application Firewalls, and ensuring secure development practices. The role involves collaborating with teams to protect applications from threats, implementing security controls, and maintaining compliance with industry standards.
Top Skills:
Automation ToolsAws WafCloudflareF5ImpervaIso 27001Mitre Att&CkNistOwaspOwasp Top 10Penetration TestingRisk AssessmentSbomScaSecure Sdlc PrinciplesThreat ModelingVulnerability AssessmentWeb Application Firewalls
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
