Cybersecurity Analyst

Overview

Cybersecurity Analyst / Penetration Tester role in Target’s Application Security team, focused on finding, validating, and helping resolve vulnerabilities across cloud infrastructure and applications.

What you'll do

• Perform manual and automated application-layer penetration testing to identify vulnerabilities.
• Conduct network-layer penetration testing across components supporting network functions and operating systems.
• Validate segmentation and scope-reduction controls at least annually and after significant changes to protect the CDE.
• Triage and validate vulnerabilities reported via a bug bounty program.
• Document and risk-rate findings with actionable remediation guidance.
• Re-test to verify exploitable vulnerability fixes and complete post-remediation assessments.

What you'll need

• Minimum 4+ years of hands-on experience in penetration testing, ethical hacking, or application security engineering.
• Deep understanding of common web attacks (e.g., SQLi, XSS, CSRF, XXE) and application-level mitigations.
• Proficiency in scripting/programming languages such as Python, Go, Ruby, or Bash.
• Knowledge of network protocols and security concepts including TCP/IP, DNS, HTTP/S, TLS, and IPSEC.
• Experience with security testing tools such as BurpSuite Enterprise, SAST, DAST, and IAST.
• Working knowledge of OWASP fundamentals and API identity/access management (OAuth 2.0, OIDC, JWT).
• Relevant security certifications such as OSCP, CEH, OSWE, or CISSP.

Nice to have

• Direct experience managing or triaging a public bug bounty program (e.g., HackerOne, BugCrowd).
• Experience using Slack/ChatOps to automate security tasks or reporting.
• Experience with cloud orchestration and Infrastructure as Code (e.g., Terraform, Google Deployment Manager).
• Familiarity with Docker and Kubernetes.
• Knowledge of compliance frameworks such as ISO 27001, PCI DSS, SOC2, or CCPA.

Details

• Location: Bangalore, India.