Information Security Analyst – VAPT

About the role

The Information Security Analyst – VAPT will help UBank identify, assess, and remediate security vulnerabilities across its IT infrastructure, applications, and digital services. Working closely with the Cybersecurity Head and cross‑functional teams, the analyst ensures the bank’s systems stay resilient against emerging threats.

Key responsibilities

• Conduct regular vulnerability scans of networks, systems, and applications.
• Analyze scan results, prioritize findings, and produce actionable reports.
• Plan, scope, and execute penetration testing (internal, external, web, and mobile).
• Document and communicate VAPT findings with technical detail, impact assessment, and remediation recommendations.
• Collaborate with the SOC team on Red and Purple team exercises.
• Support continuous vulnerability assessment for change requests across applications and infrastructure.

Required profile

• Critical thinking and ability to assess complex systems.
• Strong written and verbal communication for technical and non‑technical audiences.
• Up‑to‑date knowledge of emerging threats, tools, and technologies.
• Bachelor’s degree in Computer Science, IT, or Information Security.
• Minimum 2 years of information security experience in a reputable organization.
• Relevant certifications are a plus.

Required skills

• Vulnerability scanning and assessment.
• Penetration testing (web, mobile, network).
• Understanding of network, system, and application security vulnerabilities.
• Proficiency with VAPT tools such as Nessus, Qualys, and Burp Suite.