Cybersecurity Analyst / Engineer

Mergen Infotech; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Mergen Infotech in Bengaluru, India seeks a Cybersecurity Analyst/Engineer with 2+ years of experience to protect web applications, APIs, servers and data. You will conduct vulnerability assessments, penetration testing and security monitoring across cloud and on-prem environments.

The role covers incident response, secure configurations, RBAC reviews and collaboration with developers to fix security issues in Python-based applications and REST APIs.

Qualifications

• 2+ years of professional experience in cybersecurity or information security.
• Strong knowledge of web-application and API security.
• Practical understanding of the OWASP Top 10.
• Experience with vulnerability-assessment and penetration-testing tools.

Responsibilities

• Monitor applications, servers and networks for suspicious activity and security threats.
• Conduct vulnerability assessments and penetration testing for web applications, APIs and internal systems.
• Identify, document and help remediate security vulnerabilities.
• Perform security testing based on the OWASP Top 10 and industry best practices.
• Review application authentication, authorization and role-based access controls.
• Monitor security logs, alerts and events using SIEM or related security tools.
• Investigate security incidents and support containment, recovery and root-cause analysis.
• Secure Linux servers, cloud infrastructure, databases and production environments.
• Review firewall rules, access controls, SSL/TLS configurations and network security settings.
• Conduct regular security audits and configuration reviews.
• Work with developers to resolve security issues in Python-based web applications and REST APIs.
• Implement security controls for data protection, encryption, password management and backups.
• Manage endpoint protection, antivirus and email-security solutions.
• Prepare vulnerability, incident and security-assessment reports.
• Maintain incident-response plans, security policies and standard operating procedures.
• Conduct cybersecurity-awareness sessions for employees.
• Stay updated on emerging threats, vulnerabilities and cybersecurity technologies.

Skills

Web application security

API security

OWASP Top 10

Vulnerability assessment

Penetration testing

SIEM / log monitoring

Linux/Windows security

Cloud security

Scripting (Python, Bash, PowerShell)

Documentation

Education

Bachelor's degree in Cybersecurity / CS / IT

Tools

Burp Suite

Nmap

Nessus

Wireshark

Metasploit

OpenVAS

Job description

Job Title: Cybersecurity Analyst / Engineer

Experience: 2+ Years

Employment Type: Full-Time

Department: Information Security / IT Security

Job Summary

We are looking for a skilled Cybersecurity Analyst/Engineer with 2+ years of experience to protect our web applications, CRM platforms, APIs, servers, networks and organizational data.

The ideal candidate should have practical experience in vulnerability assessment, penetration testing, security monitoring, incident response and cloud/server security. The candidate will identify security risks, implement preventive measures and help maintain a secure technology environment.

Key Responsibilities

• Monitor applications, servers and networks for suspicious activity and security threats.
• Conduct vulnerability assessments and penetration testing for web applications, APIs and internal systems.
• Identify, document and help remediate security vulnerabilities.
• Perform security testing based on the OWASP Top 10 and industry best practices.
• Review application authentication, authorization and role-based access controls.
• Monitor security logs, alerts and events using SIEM or related security tools.
• Investigate security incidents and support containment, recovery and root-cause analysis.
• Secure Linux servers, cloud infrastructure, databases and production environments.
• Review firewall rules, access controls, SSL/TLS configurations and network security settings.
• Conduct regular security audits and configuration reviews.
• Work with developers to resolve security issues in Python-based web applications and REST APIs.
• Implement security controls for data protection, encryption, password management and backups.
• Manage endpoint protection, antivirus and email-security solutions.
• Prepare vulnerability, incident and security-assessment reports.
• Maintain incident-response plans, security policies and standard operating procedures.
• Conduct cybersecurity-awareness sessions for employees.
• Stay updated on emerging threats, vulnerabilities and cybersecurity technologies.

Required Skills

• 2+ years of professional experience in cybersecurity or information security.
• Strong knowledge of web-application and API security.
• Practical understanding of the OWASP Top 10.
• Experience with vulnerability-assessment and penetration-testing tools.
• Working knowledge of tools such as Burp Suite, Nmap, Nessus, Wireshark, Metasploit or OpenVAS.
• Experience with SIEM, log-monitoring or threat-detection tools.
• Good understanding of TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls and network security.
• Experience securing Linux and Windows environments.
• Understanding of authentication, authorization, sessions, encryption and access controls.
• Knowledge of cloud-security concepts and best practices.
• Experience with incident detection, investigation and response.
• Basic scripting knowledge in Python, Bash or PowerShell.Strong analytical, troubleshooting and documentation skills.

Preferred Skills

• Experience securing CRM, ERP, telecom, call-centre or broadband-management platforms.
• Familiarity with Python applications developed using Flask or Django.
• Experience testing REST APIs and JSON-based integrations.
• Knowledge of AWS, Azure, Google Cloud or VPS security.
• Familiarity with Docker, containers and CI/CD security.
• Understanding of secure software development and DevSecOps practices.
• Experience with data-protection and information-security standards.
• Familiarity with ISO 27001, NIST, SOC 2, PCI DSS or similar frameworks.
• Experience conducting phishing simulations and employee-security training.

Qualifications

• Bachelors degree in Cybersecurity, Computer Science, Information Technology or a related field.
• Equivalent practical cybersecurity experience may also be considered.
• Certifications such as CompTIA Security+, CEH, eJPT, OSCP or ISO 27001 are preferred but not mandatory.

Ideal Candidate

The ideal candidate is proactive, detail-oriented and capable of independently identifying security risks. The person should be comfortable working with developers, system administrators and management teams to improve the organization’s overall security posture.