Red Team Analyst

Envoy Global is a proven innovator in the global immigration space. Our mission combines our industry-leading tech platform with holistic service to streamline, simplify and expedite the immigration process for employers and individuals. We are seeking a motivated Red Team Analyst with strong foundational knowledge in Vulnerability Assessment and Penetration Testing (VAPT), Application Security Testing, and Secure Code Review . The role involves supporting security assessments of applications and systems, identifying vulnerabilities, and assisting in vulnerability governance and remediation tracking to improve the organization’s overall security posture. As our Red Team Analyst , you will be required to: Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs, and systems to identify security weaknesses. Conduct Application Security Assessments to identify vulnerabilities aligned with OWASP Top 10 risks . Assist in secure code review activities to identify potential security flaws in application code. Use security testing tools such as Burp Suite, OWASP ZAP, Nmap, and vulnerability scanners to identify security issues. Validate identified vulnerabilities and assist in providing remediation recommendations to development teams . Support vulnerability governance activities , including tracking, monitoring, and follow-up of remediation actions. Prepare security assessment reports with risk ratings and remediation guidance . Assist development teams in understanding security issues and implementing secure coding practices . Stay updated on emerging vulnerabilities, attack techniques, and application security best practices . Maintain proper documentation of security assessments, findings, and remediation status . To apply for this role, you should possess the following skills, experience and qualifications: Certification such as Certified Ethical Hacker (CEH) or Offensive Security Certified Professional (OSCP) Knowledge of Vulnerability Assessment and Penetration Testing concepts . Understanding of Web Application Security and OWASP Top 10 vulnerabilities . Familiarity with security testing tools such as Burp Suite, OWASP ZAP, Nmap, or vulnerability scanners . Basic understanding of secure coding practices and application architecture . Strong analytical and problem-solving skills. Good communication and documentation skills. 0–1 year of experience in cybersecurity, application security, or vulnerability assessment roles (internships also considered). Bachelor’s degree in Computer Science, Information Security, or a related field. If this role excites you, please take a moment to complete the questionnaire below and attach your current resume. We look forward to your prompt response.