Cyber Security Analyst

SPERO HEALTHCARE INNOVATIONS PRIVATE LIMITED; Maharashtra; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Spero Healthcare Innovations Pvt. Ltd. is seeking a Cyber Security Analyst with strong hands-on experience in vulnerability assessment and penetration testing (VAPT) of web apps, APIs, and infrastructure.

The role focuses on practical security testing and building strong fundamentals in application and API security. You will conduct manual and automated testing, document findings with evidence, and collaborate with developers to remediate vulnerabilities while tracking progress and retesting to

Qualifications

• Hands-on VAPT experience on web apps, APIs and infrastructure.
• Familiarity with OWASP Top 10 and security testing basics.
• Strong documentation of findings and remediation guidance.

Responsibilities

• Conduct VAPT on web applications, APIs and infrastructure.
• Perform manual and automated security testing to identify vulnerabilities.
• Test web applications based on the OWASP Top 10.
• Test basic API security including auth, access control, and input validation.
• Identify, validate and document security vulnerabilities with evidence.
• Analyze vulnerability scanner results and validate false positives.
• Prepare security assessment reports with vulnerability details and remediation recommendations.
• Track identified vulnerabilities through remediation and perform retesting.
• Collaborate with development teams to communicate security findings.

Skills

VAPT testing

OWASP Top 10

Security testing

Documentation

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

MobSF

Snyk

OpenVAS

Job description

Spero Healthcare Innovations Pvt. Ltd. is a healthcare technology organization working to make quality healthcare accessible through innovative, technology-driven solutions. Our teams build and operate digital health platforms and services, where protecting data and systems is central to the trust placed in us.

ROLE OVERVIEW

We are looking for a Cyber Security Analyst with a strong interest in offensive security and hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Mobile and API security testing. The candidate will work on identifying, validating, documenting and tracking security vulnerabilities across web applications, APIs and infrastructure. This role is well suited for someone who enjoys practical security testing and wants to build strong fundamentals in application and API security.

KEY RESPONSIBILITIES

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities.
• Perform web application security testing based on the OWASP Top 10.
• Perform basic API security testing, including authentication, authorization, access control, input validation and common API vulnerabilities.
• Identify, validate and document security vulnerabilities with appropriate evidence.
• Analyze vulnerability scanner results and validate potential false positives.
• Prepare security assessment and VAPT reports with vulnerability details, risk ratings, impact, evidence and remediation recommendations.
• Track identified vulnerabilities through remediation and perform retesting to verify fixes.
• Support security assessments and application security activities.
• Collaborate with development and technical teams to understand and communicate security findings.

REQUIRED SKILLS

• Strong understanding of VAPT and penetration testing methodologies.
• Good understanding of the OWASP Top 10.
• Basic understanding of web application security and API security.
• Good analytical and problem-solving skills.
• Ability to document technical findings clearly.

GOOD TO HAVE

• Experience with TryHackMe, Hack The Box, CTFs or cybersecurity labs.
• Relevant cybersecurity projects or security research.
• Basic scripting knowledge in Python, Bash or similar languages.
• Familiarity with JWT, OAuth, RBAC and API authentication mechanisms.
• Basic understanding of Linux and networking.
• Familiarity with tools such as MobSF, Snyk, OpenVAS or similar security tools.
• Cybersecurity certifications are an advantage but not mandatory.

QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics or a related field.
• Candidates with strong hands-on cybersecurity projects and practical security testing experience are encouraged to apply.