Cyber Security Analyst - 2

Styli; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Styli Marketplace is seeking a hands‑on Cybersecurity Engineer to protect its digital infrastructure and customer data. You will work across application security, cloud security, and SecOps to build scalable security capabilities for a growing e‑commerce platform.

You will conduct threat modelling, perform vulnerability testing, integrate security tools into CI/CD, and collaborate with engineering to remediate findings while strengthening cloud and container security.

Qualifications

• 3–8 years hands‑on cybersecurity engineering experience.
• Strong knowledge of OWASP Top 10 and common web vulnerabilities.
• Experience securing cloud environments (AWS or GCP, preferably GCP).
• Hands‑on with security tooling (Burp Suite, Nessus/Qualys, Trivy, Snyk, SonarQube).
• Proficiency in Python, Bash, or Go for automation.
• Solid networking fundamentals (TCP/IP, DNS, TLS, HTTP/S).
• Experience integrating security into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).

Responsibilities

• Conduct threat modelling, security design reviews, and code‑level security assessments for features and releases.
• Integrate SAST/DAST/SCA into CI/CD to shift security left.
• Perform vulnerability assessments and penetration testing of web and mobile apps.
• Collaborate with engineering to remediate findings and track closures.
• Secure cloud environments (IAM, VPC, S3 policies, secrets management).
• Maintain container security controls and Kubernetes policy enforcement.
• Define and audit Infrastructure‑as‑Code (Terraform) for misconfigurations.

Skills

OWASP Top 10

Cloud security (AWS/GCP)

Security tooling

CI/CD security integration

Scripting (Python, Bash, Go)

Networking fundamentals

Vulnerability assessment & pen testing

Tools

Burp Suite

Nessus/Qualys

Trivy

Snyk

SonarQube

Job description

Experience: 3–8 Years

About Styli Marketplace

Launched in 2019 by Landmark Group, Styli Marketplace is the first e-commerce venture of the group, quickly becoming a leading online destination for fashion and lifestyle across the GCC, including Saudi Arabia, the UAE, Kuwait, Bahrain, and beyond. Styli connects global sellers and creators with millions of fashion-forward customers, offering the latest trends, exceptional value, and convenient services like same-day to 48-hour delivery and flexible payment options. Our mission is to make style accessible, aspirational, and exciting for all, backed by a passionate team fostering a culture of creativity and innovation. At Styli, we aim to revolutionize fashion retail and bring unique experiences to our customers.

Role Overview

We are looking for a driven and hands‑on Cybersecurity Engineer to join our security engineering team. You will be responsible for protecting Styli's digital infrastructure, customer data, and application ecosystem against evolving threats. This is a high‑impact role where you will work across AppSec, cloud security, and SecOps to build security capabilities that scale with our growth.

What You'll Do

Application & Product Security

• Conduct threat modelling, security design reviews, and code-level security assessments for new features and product releases.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines to shift security left.
• Perform regular vulnerability assessments and penetration testing of web and mobile applications (Android/iOS).
• Partner with engineering teams to remediate findings and track closure SLAs.
• Secure cloud environments (AWS / GCP) including IAM hardening, VPC configurations, S3 bucket policies, and secrets management.
• Implement and maintain container security controls — image scanning, runtime protection, Kubernetes policy enforcement (OPA/Kyverno).
• Define and audit Infrastructure-as-Code (Terraform) for security misconfigurations using tools like Checkov or tfsec.

Security Operations & Incident Response

• Monitor SIEM and alerting pipelines; triage, investigate, and respond to security incidents.
• Develop detection rules and playbooks to reduce mean time to detect (MTTD) and respond (MTTR).
• Conduct post‑incident reviews and drive root cause analysis with actionable hardening recommendations.

Compliance & Risk

• Support various data privacy compliance programs relevant to e-commerce operations.
• Conduct vendor and third‑party security assessments.
• Maintain security documentation, risk registers, and evidence artifacts for audits.

What We're Looking For

Required

• 3–8 years of hands‑on experience in cybersecurity engineering or related roles.
• Strong knowledge of OWASP Top 10, common web vulnerabilities (SQLi, XSS, SSRF, IDOR, etc.), and secure coding practices.
• Experience securing cloud environments — AWS or GCP. Preferably GCP.
• Hands‑on experience with security tooling: Burp Suite, Nessus/Qualys, Trivy, Snyk, SonarQube, or equivalents.
• Proficiency in at least one scripting language: Python, Bash, or Go — for automation and tooling.
• Solid understanding of networking fundamentals: TCP/IP, DNS, TLS, HTTP/S, firewalls, proxies.
• Experience integrating security into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).

Good to Have

• Experience with bug bounty programs (HackerOne / Bugcrowd) — either as a participant or a program operator.
• Familiarity with API security (REST, GraphQL) in high‑traffic e-commerce or fintech environments.
• Knowledge of container and Kubernetes security hardening.
• Relevant certifications: CEH, OSCP, AWS Security Specialty, CCSP, or CompTIA Security+.
• Prior experience in e-commerce, fintech, or payments‑adjacent environments.