SECURITY ANALYST

Datacultr Fintech Limited; Gurugram District; On-site; INR 800,000 - 1,200,000; Full time

Benefits offered by this job

Competitive compensation structure

Exposure to global financial clients

Comprehensive health and wellness benefits

Job summary

A global fintech company is seeking a Security Analyst to proactively identify security vulnerabilities and collaborate with engineering teams. The ideal candidate should have hands-on experience in vulnerability assessment and penetration testing, with a strong understanding of OWASP methodologies. This role offers competitive compensation, exposure to global financial clients, and comprehensive health benefits.

Qualifications

• 1–4 years of experience in cybersecurity/VAPT.
• Strong understanding of OWASP Top 10 and Secure SDLC.
• Hands-on experience in web, API, and mobile application security testing.

Responsibilities

• Conduct comprehensive VAPT across web and mobile applications.
• Identify and document security weaknesses.
• Execute manual and automated security testing.

Skills

Vulnerability assessment

Penetration testing

OWASP methodologies

Problem-solving

Security frameworks

Education

Certifications such as CEH, OSCP, CRTA, CNDA, eJPT

Tools

Burp Suite

OWASP ZAP

Nmap

Wireshark

Job description

Datacultr is a global DigitalOperating System for Risk Management and Debt Recovery, we drive CollectionEfficiencies, Reduce Delinquencies and Non-Performing Loans (NPL’s). Datacultris a Digital-Only provider of Consumer Engagement, Recovery and CollectionSolutions, helping Consumer Lending, Retail, Telecom and Fintech Organizations to expand and grow their business in the under-penetrated New to Credit and Thin File Segments.

We are helping millions of new to credit consumers, across emerging markets, access formal credit and begin their journey towards financial health. We have clients across India, South Asia, South East Asia, Africa and LATAM.

Datacultr is headquartered in Dubai, with offices in Abu Dhabi, Singapore, Ho Chi Minh City, Nairobi, and Mexico City; and our Development Center is located out of Gurugram, India.

Job Description

Position Overview

We are seeking a Security Analyst with hands-on experience in vulnerability assessment & penetration testing (VAPT), specifically across web, mobile, API, and infrastructure environments. The ideal candidate will be responsible for proactively identifying security vulnerabilities, performing risk analysis, and collaborating with engineering teams to ensure secure product development and deployment.

This role requires strong technical security expertise, deep understanding of OWASP methodologies, and the ability to deliver clear remediation guidance. Experience in bug bounty or offensive security research is an added advantage.

Core Responsibilities

• Conduct comprehensive VAPT across web applications, mobile applications (Android/iOS), APIs, networks, and supporting infrastructure.
• Identify, exploit, and document security weaknesses including OWASP Top 10 vulnerabilities.
• Execute manual and automated security testing with industry-standard tools (Burp Suite, OWASP ZAP, Nmap, Wireshark, etc.).
• Prepared detailed technical security reports aligned with CWE, CVSS, and OWASP standards.
• Communicate findings, risk levels, and mitigation steps clearly to engineering and product teams.
• Work closely with development and DevOps teams to guide remediation of vulnerabilities.
• Provide secure coding and hardening best practices to internal teams.
• Continuously evaluate new security threats, tools, and techniques.
• Contribute to internal security processes, automation efforts, and knowledge-sharing initiatives.
• Participate in internal red-team exercises and security drills.

Key Requirements

• 1–4 years of experience in cybersecurity/VAPT.
• Strong understanding of OWASP Top 10, Secure SDLC, CVSS scoring, and industry security frameworks.
• Experience with testing tools such as Burp Suite, OWASP ZAP, Nmap, Wireshark, etc.
• Hands‑on experience in web, API, and mobile application security testing.
• Familiarity with server/network fundamentals (Windows/Linux).
• Excellent problem‑solving skills and ability to translate findings into actionable recommendations.
• Certifications such as CEH, OSCP, CRTA, CNDA, eJPT (preferred but not mandatory).

What We Offer

• Competitive compensation structure with performance‑based incentives tied to account growth.
• Exposure to global financial clients and next‑gen SaaS technologies.
• Collaborative, innovation‑focused environment.
• Comprehensive health and wellness benefits.