Cyber Security Analyst

SPERO HEALTHCARE INNOVATIONS PRIVATE LIMITED; Pune District; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Spero Healthcare Innovations Pvt. Ltd. is seeking a Cyber Security Analyst with hands-on VAPT experience to identify, validate and document security weaknesses across web applications, APIs and infrastructure.

You will produce evidence, risk ratings and remediation recommendations. The role focuses on practical security testing, collaborating with development and operations teams, and delivering clear security reports.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity or related field.
• Hands-on cybersecurity testing experience with VAPT.
• Familiarity with OWASP Top 10.
• Knowledge of API and web application security.
• Ability to document findings clearly with evidence and remediation steps.

Responsibilities

• Perform VAPT on web applications, APIs and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities.
• Test web applications based on OWASP Top 10.
• Test API security including authentication and access control.
• Document vulnerabilities with evidence and risk ratings.
• Analyze scanner results and validate false positives.
• Prepare reports with remediation recommendations and track fixes.
• Collaborate with development teams to communicate findings.

Skills

VAPT

OWASP Top 10

Web security basics

API security

Documentation

Collaboration

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

MobSF

Snyk

OpenVAS

Job description

ABOUT THE COMPANY

Spero Healthcare Innovations Pvt. Ltd. is a healthcare technology organization working to make quality healthcare accessible through innovative, technology-driven solutions. Our teams build and operate digital health platforms and services, where protecting data and systems is central to the trust placed in us.

ROLE OVERVIEW

We are looking for a Cyber Security Analyst with a strong interest in offensive security and hands‑on experience in Vulnerability Assessment and Penetration Testing (VAPT), Mobile and API security testing. The candidate will work on identifying, validating, documenting and tracking security vulnerabilities across web applications, APIs and infrastructure. This role is well suited for someone who enjoys practical security testing and wants to build strong fundamentals in application and API security.

KEY RESPONSIBILITIES

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs and infrastructure.
• Conduct manual and automated security testing to identify vulnerabilities.
• Perform web application security testing based on the OWASP Top 10.
• Perform basic API security testing, including authentication, authorization, access control, input validation and common API vulnerabilities.
• Identify, validate and document security vulnerabilities with appropriate evidence.
• Analyze vulnerability scanner results and validate potential false positives.
• Prepare security assessment and VAPT reports with vulnerability details, risk ratings, impact, evidence and remediation recommendations.
• Track identified vulnerabilities through remediation and perform retesting to verify fixes.
• Support security assessments and application security activities.
• Collaborate with development and technical teams to understand and communicate security findings.

REQUIRED SKILLS

• Strong understanding of VAPT and penetration testing methodologies.
• Good understanding of the OWASP Top 10.
• Basic understanding of web application security and API security.
• Basic understanding of HTTP/HTTPS, REST APIs, authentication, authorization, sessions, cookies and security headers.
• Good analytical and problem-solving skills.
• Ability to document technical findings clearly.

GOOD TO HAVE

• Experience with TryHackMe, Hack The Box, CTFs or cybersecurity labs.
• Relevant cybersecurity projects or security research.
• Basic scripting knowledge in Python, Bash or similar languages.
• Familiarity with JWT, OAuth, RBAC and API authentication mechanisms.
• Basic understanding of Linux and networking.
• Familiarity with tools such as MobSF, Snyk, OpenVAS or similar security tools.
• Cybersecurity certifications are an advantage but not mandatory.

QUALIFICATIONS

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics or a related field.
• Candidates with strong hands‑on cybersecurity projects and practical security testing experience are encouraged to apply.