Cyber Security Senior Analyst - Pentesting

Location: India

• Moderate functional knowledge of cyber security or information security processes and expert domain knowledge.
• Assist functional manager in performing day to day security activities/operations by working independently; handle larger projects or assignments.
• Analyze the problem statements, define and execute the desired solutions, mentor team members.
• Work in line with defined processes, framework and provide regular functional updates to manager.
• Ability to prioritize deliverables and work in consultation with manager and other seniors in the team.
• Contribute to various functional initiatives with larger responsibilities.

• Required Skills & Experience

• 3–6 years of experience in penetration testing, application security, or related cybersecurity domains.

• Strong expertise in testing web applications, APIs, and thick-client applications.

• Good understanding of application architectures, HTTP/HTTPS, TCP/IP, and secure development practices.

• Strong knowledge of OWASP Top 10, OWASP API Security Top 10, Mobile Top 10, and SANS Top 25.

• Hands-on experience with security testing tools such as Burp Suite, Nmap, Kali Linux, Nessus, Metasploit, and related tools.

Experience leveraging AI-assisted penetration testing techniques and evaluating security risks in AI-enabled applications, including prompt injection, data exposure, model abuse, and LLM-related vulnerabilities

• Understanding of application technologies and frameworks including .NET, Java, PHP, Angular, Node.js, and modern web technologies.

• Proficiency in one or more scripting/programming languages such as Python, Java, JavaScript, or C/C++.

• Experience testing authentication, authorization, session management, identity management, and deployment configurations.

• Strong analytical, communication, presentation, and stakeholder management skills.

Preferred Qualifications

• Industry-recognized certifications such as OSCP, OSWE, eWPT, or similar.

• Experience participating in Bug Bounty programs.

• Proven track record of discovering significant vulnerabilities, CVEs, or achieving recognition on bug bounty platforms.

• Experience with cloud and AI-enabled application security assessments.

Within Societe Generale Global Solution Center (SGGSC), you will join Global Cybersec Capability Centre (G3C) team based out of Bengaluru, working in Pentest team to contribute to Global Pentest practice.

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious.
Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating and taking action are part of our DNA.
If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!
Still hesitating?
You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices and sharing their skills with charities. There are many ways to get involved.
We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.