CYBER SECURITY ANALYST L3

Job Description

Key Responsibilities (L1.5)

Attack Surface Management Operations (Securin ASM)

• Execute and monitor ASM scans using Securin to identify:
• Externally exposed assets
• Shadow IT and unknown domains/IPs
• Configuration or exposure‑related risks
• Validate discovered assets against known inventories before escalation.
• Track newly identified or changed attack surfaces and raise findings for review.

SAST / DAST Scan Execution & Management

• Execute SAST and DAST scans using approved tools as per defined schedules and scope.
• Monitor scan execution status and handle operational issues (scan failures, incomplete runs).
• Ensure scan coverage aligns with defined applications, repositories, and environments.

Vulnerability Triage & Validation

• Perform initial validation and triage of findings, including:
• Duplicate identification
• Obvious false positives (based on tool output and runbooks)
• Severity alignment using provided criteria
• Classify findings appropriately before routing to L2/L3 or development teams.
• Correlate ASM findings with SAST/DAST results where applicable.

Ticketing, Reporting & Coordination

• Create and update vulnerability tickets with:
• Accurate descriptions
• Tool evidence
• Affected assets or applications
• Support remediation coordination by:
• Tracking status
• Following up on aging findings
• Supporting re‑scan and validation activities post‑fix
• Prepare operational reports and metrics inputs as required.

Process Adherence & Continuous Improvement

• Follow defined SOPs, scanning standards, and SOW‑aligned processes.
• Identify recurring issues (scan failures, common false positives, asset gaps) and flag improvement opportunities to L2/L3 teams.
• Support documentation updates for runbooks and scan procedures.

Working Model

• India‑based role supporting US business hours
• Shift aligned to application and development team working windows
• No 24×7 rotation required unless explicitly planned

Required Skills & Experience

Mandatory

• 2–4 years experience in application security operations, vulnerability management, or security testing support
• Hands‑on experience or strong operational exposure to:
• Securin ASM or similar ASM platforms
• SAST/DAST tools (AppScan, AppCheck, SonarQube, Veracode or equivalents)
• Understanding of:
• OWASP Top 10
• Common application security vulnerabilities
• Basic secure coding concepts

͏

Areas of responsibility

Monitoring and Incident Detection-Handle escalated alerts, prevent potential intrusions from third party agents and analyse log correlation to ensure alignment with security standards.

Incident Handling and Analysis-Triage security incidents, handle escalated incidents, assist in performing root cause analysis and prepare reports that adhere to compliance requirements.

Threat Assessment and Analytics-"Perform vulnerability scans, identify threat intelligence feeds, and recommend preventive measures to reduce exposure."

Stakeholder Coordination and Audit Assistance-Coordinate with internal teams on security issues, maintain risk registers and assist during compliance audits.

͏

͏

͏