Role: Cyber Security Analyst - 2

Location: Bangalore

Department: Platform Engineering / Security

Experience: 3–8 Years

About Styli Marketplace

Launched in 2019 by Landmark Group, Styli Marketplace is the first e-commerce venture of the group, quickly becoming a leading online destination for fashion and lifestyle across the GCC, including Saudi Arabia, the UAE, Kuwait, Bahrain, and beyond. Styli connects global sellers and creators with millions of fashion-forward customers, offering the latest trends, exceptional value, and convenient services like same-day to 48-hour delivery and flexible payment options. Our mission is to make style accessible, aspirational, and exciting for all, backed by a passionate team fostering a culture of creativity and innovation.

At Styli, we aim to revolutionize fashion retail and bring unique experiences to our customers.

Role Overview

We are looking for a driven and hands-on Cybersecurity Engineer to join our security engineering team. You will be responsible for protecting Styli's digital infrastructure, customer data, and application ecosystem against evolving threats. This is a high-impact role where you will work across AppSec, cloud security, and SecOps to build security capabilities that scale with our growth.

What You'll Do

Application & Product Security

- Conduct threat modelling, security design reviews, and code-level security assessments for new features and product releases.
- Integrate SAST, DAST, and SCA tools into CI/CD pipelines to shift security left.
- Perform regular vulnerability assessments and penetration testing of web and mobile applications (Android/iOS).
- Partner with engineering teams to remediate findings and track closure SLAs.

Cloud & Infrastructure Security

- Secure cloud environments (AWS / GCP) including IAM hardening, VPC configurations, S3 bucket policies, and secrets management.




- Implement and maintain container security controls — image scanning, runtime protection, Kubernetes policy enforcement (OPA/Kyverno).
- Define and audit Infrastructure-as-Code (Terraform) for security misconfigurations using tools like Checkov or tfsec.

Security Operations & Incident Response

- Monitor SIEM and alerting pipelines; triage, investigate, and respond to security incidents.
- Develop detection rules and playbooks to reduce mean time to detect (MTTD) and respond (MTTR).
- Conduct post-incident reviews and drive root cause analysis with actionable hardening recommendations.

Compliance & Risk

- Support various data privacy compliance programs relevant to e-commerce operations.
- Conduct vendor and third-party security assessments.
- Maintain security documentation, risk registers, and evidence artifacts for audits.

What We're Looking For

Required

- 3–8 years of hands-on experience in cybersecurity engineering or related roles.
- Robust knowledge of OWASP Top 10, common web vulnerabilities (SQLi, XSS, SSRF, IDOR, etc.), and secure coding practices.
- Experience securing cloud environments — AWS or GCP. Preferably GCP.
- Hands-on experience with security tooling: Burp Suite, Nessus/Qualys, Trivy, Snyk, SonarQube, or equivalents.
- Proficiency in at least one scripting language: Python, Bash, or Go — for automation and tooling.
- Solid understanding of networking fundamentals: TCP/IP, DNS, TLS, HTTP/S, firewalls, proxies.
- Experience integrating security into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).

Good to Have

- Experience with bug bounty programs (HackerOne / Bugcrowd) — either as a participant or a program operator.
- Familiarity with API security (REST, GraphQL) in high-traffic e-commerce or fintech environments.
- Knowledge of container and Kubernetes security hardening.
- Relevant certifications: CEH, OSCP, AWS Security Specialty, CCSP, or CompTIA Security+.
- Prior experience in e-commerce, fintech, or payments-adjacent environments.

📌 Cyber Security Analyst - 2 (Bengaluru)
🏢 STYLI
📍 Bengaluru