IT Security Analyst

About the role

The IT Security Analyst will protect IBEX’s global infrastructure by performing comprehensive security assessments and penetration tests across web, API, mobile, and AI/LLM applications. The role collaborates closely with development and infrastructure teams to remediate findings and strengthen the organization’s security posture.

Key responsibilities

• Conduct full‑scale manual penetration testing of web, API, mobile and generative AI applications.
• Participate in red‑team exercises and coordinate third‑party penetration testing engagements.
• Use open‑source tools and custom scripts to enumerate publicly exposed assets and map vulnerability surfaces.
• Collaborate with IT and development teams to remediate identified weaknesses.
• Review application designs to uncover business‑logic flaws and support secure coding practices.
• Perform vulnerability scanning of IT assets using dynamic and static analysis tools.
• Execute cloud security reviews and produce gap analysis reports with remediation guidance.
• Assess generative AI models for prompt injection, adversarial input, model inversion and hallucination attacks.

Required profile

• Bachelor’s degree in IT, Computer Science, Software Engineering or Telecom.
• Passion for cybersecurity and strong presentation abilities.
• 1‑2 years of hands‑on experience in penetration testing and vulnerability assessment.
• Professional certifications such as OSCP, OSWP or CEH (practical) are mandatory.

Required skills

• Penetration testing and vulnerability assessment.
• Burp Suite (Burp Pro) and other pentest tools.
• Source code analysis tools.
• Deep understanding of OWASP guidelines.
• Cloud security assessment techniques.
• AI/LLM security testing (prompt injection, model inversion, etc.).
• Open‑source enumeration and scripting tools.