Security Analyst

Securin is an AI-native cybersecurity company. Our Preemptive Exposure Management Platform turns exposure data into clear decisions — giving organizations the confidence to know which risks are exploitable, what to fix first, and how to act before attackers do. Job Summary This position exposes a candidate to the best of both worlds - Penetration Testing as well Developing Prototype tools to assist in the testing phase. This position includes research and prototype development of automated cyber security testing and security data analytics tools used in the assessment of enterprise network segments and web applications. The selected candidate will also participate in cyber security penetration testing engagements in order to establish subject matter expertise. Duties and Responsibilities Conduct comprehensive penetration testing and vulnerability assessments on computer systems, networks, and applications. Identify and exploit security vulnerabilities through manual testing techniques, automated tools, and other means. Perform in-depth analysis of test results, documenting and communicating findings to technical and non-technical stakeholders. Develop and execute detailed test plans and methodologies for conducting penetration tests. Collaborate with cross-functional teams, including developers, system administrators, and network engineers, to implement remediation strategies and mitigate identified vulnerabilities. Manage project timelines, deadlines, and expectations – including client interactions Stay updated on the latest security threats, attack vectors, and penetration testing techniques, and continuously enhance knowledge and skills in the field of information security. Assist in the development and improvement of security policies, procedures, and guidelines. Participate in red teaming exercises and simulate real-world attack scenarios to assess the overall security posture of the organization. Having proficient knowledge in MITRE ATT&CK framework. Maintain accurate and detailed documentation of testing activities, findings, and recommendations. Prepare reports documenting identified issues based on internal templates. Interact with clients to deliver results, provide feedback, and remediation recommendations on findings. Research emerging security topics and new attack vectors Perform and review the hardening of the systems and network devices. Supports the team and lead analyst in custom penetration test projects as required. Participates in required client communication, kick-off calls, data analysis, and findings presentation both remotely and in person. Assists developers and server administrators on coding best practices, secure configurations, and remediation best practices. Provides assistance to Operations team for debugging, exploitation and vulnerability analysis. Contributes to the design of penetration test report deliverables, constantly evaluating effectiveness of report outline. Requirements Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent work experience). At least 2-5 years of experience in penetration testing and vulnerability assessments, with a focus on web applications, networks, and infrastructure. Experienced with programming/scripting languages (e.g.: Python, Bash, Rust) In-depth knowledge of various penetration testing tools, frameworks and OS (e.g., Kali Linux, Metasploit, Burp Suite, Nmap, Wireshark, etc.). Good understanding of common vulnerabilities and attack vectors (e.g., SQL injection, cross-site scripting, buffer overflows, etc.) and corresponding mitigation techniques. Familiarity with industry standards and frameworks such as OWASP top 10, CVE, CWE, SANS, OSSTMM, and NIST. Excellent analytical and problem-solving skills, with the ability to think creatively and strategically to find vulnerabilities. Effective communication and presentation skills to convey complex technical concepts to both technical and non-technical stakeholders Core AI Specific Skill Requirements in General: Securin is committed to becoming an AI-native organization where GenAI is embedded into how every team works - not just as an occasional assistant, but as a core part of delivery, operations, and how our expertise compounds over time. We expect every employee to integrate GenAI tools into daily workflows actively - automating routine tasks, accelerating research and analysis, drafting documents, and building reusable AI-powered processes for their function. You should understand the limitations of GenAI (including inaccuracies and data sensitivity boundaries), follow data classification rules, and continuously improve your AI proficiency. As you grow, we expect you to move beyond using GenAI to building with it - designing agent workflows, contributing reusable skills, and helping Securin compound its Proactive Exposure Management expertise faster than any competitor can replicate. Demonstrated ability to use GenAI tools (e.g., Claude, ChatGPT, etc.) for daily work - drafting, research, summarization, data analysis, code generation, or workflow automation as relevant to the role Working knowledge of GenAI limitations including hallucination risk, context window constraints, and data sensitivity boundaries; ability to validate AI-generated output before acting on it Familiarity with prompt engineering techniques - structuring multi-step instructions, providing context, and iterating on output quality to achieve production-grade results Comfort with Agentic AI workflows - using, designing, or building multi-step AI agents that execute tasks autonomously with human-in-the-loop validation Awareness of AI security fundamentals - prompt injection risks, data classification rules, sandboxed execution, and responsible handling of sensitive data in AI workflows Familiarity with connecting GenAI tools to internal data sources, APIs, and enterprise systems Ability to contribute reusable AI skills, templates, agent configurations, or automation workflows to a shared repository for team-wide use Willingness to learn and adopt new AI tools as they evolve; participation in AI adoption sprints, hackathons, and knowledge-sharing within the team Preferred qualifications: GIAC, OSCP, OSEP, HTB Certifications, CEH, CompTIA Pentest+, CRTP, CRTE or any equivalent security certifications are preferred.