Information Security Analyst

Accops is looking for a hands-on Security Penetration Tester to identify, validate, and help remediate security vulnerabilities across our products, applications, APIs, infrastructure, and networks. The ideal candidate should have strong practical experience in Vulnerability Assessment & Penetration Testing (VAPT), application and network security testing, vulnerability exploitation, and security assessment methodologies. You will work closely with Engineering, Product, and Security teams to identify security weaknesses and improve the overall security posture of Accops products. Technical Skills Required Mandatory:
• 3+ years of hands-on experience in Penetration Testing / VAPT / Application Security.
• Strong knowledge of:
• Web Application Security
• API Security
• Network Security
• Infrastructure Security
• Windows & Linux Security
• Strong understanding of OWASP Top 10 and OWASP API Security Top 10.
• Hands-on experience with penetration-testing tools such as:
• Burp Suite
• Nmap
• Metasploit
• Wireshark
• Nessus / OpenVAS
• SQLMap
• Nikto
• Kali Linux
• Understanding of common vulnerabilities such as:
• SQL Injection
• XSS
• CSRF
• SSRF
• Command Injection
• Authentication/Authorization issues
• Privilege Escalation
• IDOR/BOLA
• Security Misconfiguration
• Insecure Deserialization
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, ports and network protocols.
• Ability to perform vulnerability validation and manual exploitation rather than relying only on automated scanners.
• Good scripting/programming knowledge in Python, Bash, PowerShell, or similar languages.
• Strong analytical and problem-solving skills.
• Ability to create clear technical security reports and communicate findings to engineering teams. Good To have:
• Experience testing enterprise/security products, SaaS applications, endpoint solutions, VPN/ZTNA/VDI/virtualization platforms.
• Knowledge of virtualization technologies such as VMware, Hyper-V, or KVM.
• Experience with cloud security testing.
• Experience with source-code review / secure code review.
• Knowledge of Active Directory and Windows domain security.
• Experience with threat modeling and security assessment methodologies.
• Familiarity with CVSS scoring and CVE analysis.
• Experience with security automation and scripting. Certifications – Preferred One or more of the following certifications would be an advantage:
• OSCP
• OSWE
• CEH
• eJPT
• PNPT
• CREST certifications
• Security+ or equivalent security certifications Soft Skills Required
• Strong communication skills(verbal and written both)
• Proactive
• Self-motivated
• Logical bent of mind (Analytical)
• Team player & quick learner
• Flexible/adaptable
• Multi-Tasking
• Excellent team player Role and

Responsibilities:
• Perform Web Application, API, Network, and Infrastructure Penetration Testing.
• Conduct vulnerability assessments and penetration tests across Accops products and environments.
• Identify, validate, exploit, and document security vulnerabilities.
• Perform manual security testing in addition to automated vulnerability scanning.
• Test authentication, authorization, session management, access controls, encryption, input validation, and other security controls.
• Perform testing based on OWASP Top 10 and OWASP API Security Top 10.
• Conduct network and infrastructure security assessments including TCP/IP, DNS, HTTP/HTTPS, VPN, firewalls, and related technologies.
• Perform security testing of Windows and Linux environments.
• Assess vulnerabilities in APIs, web applications, services, endpoints, and network-facing components.
• Use penetration-testing tools to identify and validate vulnerabilities.
• Develop proof-of-concept exploits where required to demonstrate security impact.
• Perform vulnerability verification and re-testing after remediation.
• Prepare detailed penetration testing reports including:
• Vulnerability description
• Business/security impact
• Severity
• Proof of concept/evidence
• Affected components
• Recommended remediation
• Collaborate with developers and engineering teams to explain vulnerabilities and support remediation.
• Track vulnerabilities through their lifecycle and ensure appropriate closure.
• Stay updated on emerging vulnerabilities, CVEs, attack techniques, exploits, and security trends.
• Support security reviews and contribute to improving secure development practices. Founded in 2012, Accops is a leading provider of secure remote access and digital workspace solutions, enabling organizations to maintain control and governance while offering flexibility to work from any device. Accops offers a comprehensive Digital Workspace suite that includes Zero Trust-based Application Access Gateway, End-User Computing (EUC) Virtualization via VDI, robust Identity & Access Management (IAM) solutions such as Multi-Factor Authentication (MFA) and Single Sign-On (SSO), and thin client hardware and software. solutions. Accops addresses modern remote work challenges by delivering secure, instant access to business applications. Its solutions protect against network threats and unauthorized access, critical in today’s work-from-anywhere environment. Unlike traditional, multi-product approaches, Accops' pre-integrated suite reduces complexity and deployment time, ensuring faster and more agile implementation. Headquartered in Pune, Accops has become a significant player in the End-User Computing (EUC) virtualization domain, offering a one-stop solution for organizations seeking to deploy secure remote work infrastructures. Its products, including the Nano OS for secure containerization on BYOD devices, and extensive MFA and SSO capabilities, ensure robust data protection and strong identity management. Part of Jio Platforms Ltd, Accops continues to innovate and enhance digital workspace solutions with a focus on security, user experience, and operational efficiency. 𝘈𝘤𝘤𝘰𝘱𝘴 𝘪𝘴 𝘢𝘯 𝘦𝘲𝘶𝘢𝘭 𝘰𝘱𝘱𝘰𝘳𝘵𝘶𝘯𝘪𝘵𝘺 𝘦𝘮𝘱𝘭𝘰𝘺𝘦𝘳 𝘤𝘰𝘮𝘮𝘪𝘵𝘵𝘦𝘥 𝘵𝘰 𝘣𝘶𝘪𝘭𝘥𝘪𝘯𝘨 𝘢 𝘤𝘶𝘭𝘵𝘶𝘳𝘦 𝘸𝘩𝘦𝘳𝘦 𝘢𝘭𝘭 𝘦𝘮𝘱𝘭𝘰𝘺𝘦𝘦𝘴 𝘢𝘳𝘦 𝘷𝘢𝘭𝘶𝘦𝘥, 𝘳𝘦𝘴𝘱𝘦𝘤𝘵𝘦𝘥 𝘢𝘯𝘥 𝘰𝘱𝘪𝘯𝘪𝘰𝘯𝘴 𝘤𝘰𝘶𝘯𝘵. 𝘞𝘦 𝘦𝘯𝘤𝘰𝘶𝘳𝘢𝘨𝘦 𝘢𝘱𝘱𝘭𝘪𝘤𝘢𝘵𝘪𝘰𝘯𝘴 𝘧𝘳𝘰𝘮 𝘢𝘭𝘭 𝘴𝘶𝘪𝘵𝘢𝘣𝘭𝘺 𝘲𝘶𝘢𝘭𝘪𝘧𝘪𝘦𝘥𝘱𝘦𝘳𝘴𝘰𝘯𝘴 𝘪𝘳𝘳𝘦𝘴𝘱𝘦𝘤𝘵𝘪𝘷𝘦 𝘰𝘧, 𝘣𝘶𝘵 𝘯𝘰𝘵 𝘭𝘪𝘮𝘪𝘵𝘦𝘥 𝘵𝘰, 𝘵𝘩𝘦𝘪𝘳 𝘨𝘦𝘯𝘥𝘦𝘳 𝘰𝘳 𝘨𝘦𝘯𝘦𝘵𝘪𝘤 𝘪𝘯𝘧𝘰𝘳𝘮𝘢𝘵𝘪𝘰𝘯, 𝘴𝘦𝘹𝘶𝘢𝘭 𝘰𝘳𝘪𝘦𝘯𝘵𝘢𝘵𝘪𝘰𝘯, 𝘦𝘵𝘩𝘯𝘪𝘤𝘪𝘵𝘺, 𝘳𝘦𝘭𝘪𝘨𝘪𝘰𝘯, 𝘴𝘰𝘤𝘪𝘢𝘭 𝘴𝘵𝘢𝘵𝘶𝘴, 𝘮𝘦𝘥𝘪𝘤𝘢𝘭 𝘤𝘢𝘳𝘦 𝘭𝘦𝘢𝘷𝘦 𝘳𝘦𝘲𝘶𝘪𝘳𝘦𝘮𝘦𝘯𝘵𝘴, 𝘱𝘰𝘭𝘪𝘵𝘪𝘤𝘢𝘭 𝘢𝘧𝘧𝘪𝘭𝘪𝘢𝘵𝘪𝘰𝘯, 𝘱𝘦𝘰𝘱𝘭𝘦 𝘸𝘪𝘵𝘩 𝘥𝘪𝘴𝘢𝘣𝘪𝘭𝘪𝘵𝘪𝘦𝘴, 𝘤𝘰𝘭𝘰𝘳, 𝘯𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘰𝘳𝘪𝘨𝘪𝘯, 𝘷𝘦𝘵𝘦𝘳𝘢𝘯 𝘴𝘵𝘢𝘵𝘶𝘴, 𝘦𝘵𝘤. 𝘞𝘦 𝘤𝘰𝘯𝘴𝘪𝘥𝘦𝘳 𝘢𝘭𝘭 𝘢𝘱𝘱𝘭𝘪𝘤𝘢𝘵𝘪𝘰𝘯𝘴 𝘣𝘢𝘴𝘦𝘥 𝘰𝘯 𝘮𝘦𝘳𝘪𝘵 𝘢𝘯𝘥 𝘴𝘶𝘪𝘵𝘢𝘣𝘪𝘭𝘪𝘵𝘺 𝘵𝘰 𝘵𝘩𝘦 𝘳𝘰𝘭𝘦.