Spero Healthcare Innovations Pvt. Ltd. is a healthcare technology organization working to make quality healthcare accessible through innovative technology-driven solutions. Our teams build and operate digital health platforms and services where protecting data and systems is central to the trust placed in us.
ROLE OVERVIEW
We are looking for a Cyber Security Analyst with a strong interest in offensive security and hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT) Mobile and API security testing. The candidate will work on identifying validating documenting and tracking security vulnerabilities across web applications APIs and infrastructure. This role is well suited for someone who enjoys practical security testing and wants to build strong fundamentals in application and API security.
KEY RESPONSIBILITIES
Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications APIs and infrastructure.
Conduct manual and automated security testing to identify vulnerabilities.
Perform web application security testing based on the OWASP Top 10.
Perform basic API security testing including authentication authorization access control input validation and common API vulnerabilities.
Identify validate and document security vulnerabilities with appropriate evidence.
Analyze vulnerability scanner results and validate potential false positives.
Prepare security assessment and VAPT reports with vulnerability details risk ratings impact evidence and remediation recommendations.
Track identified vulnerabilities through remediation and perform retesting to verify fixes.
Support security assessments and application security activities.
Collaborate with development and technical teams to understand and communicate security findings.
REQUIRED SKILLS
Strong understanding of VAPT and penetration testing methodologies.
Good understanding of the OWASP Top 10.
Basic understanding of web application security and API security.
Basic understanding of HTTP/HTTPS REST APIs authentication authorization sessions cookies and security headers.
Positive analytical and problem-solving skills.
Ability to document technical findings clearly.
GOOD TO HAVE
Experience with TryHackMe Hack The Box CTFs or cybersecurity labs.
Relevant cybersecurity projects or security research.
Basic scripting knowledge in Python Bash or similar languages.
Familiarity with JWT OAuth RBAC and API authentication mechanisms.
Basic understanding of Linux and networking.
Familiarity with tools such as MobSF Snyk OpenVAS or similar security tools.
Cybersecurity certifications are an advantage but not mandatory.
QUALIFICATIONS
Bachelors degree in Computer Science Information Technology Cybersecurity Electronics or a related field.
Candidates with strong hands-on cybersecurity projects and practical security testing experience are encouraged to apply.
Required Experience:
IC
📌 Cyber Security Analyst (Pune)
🏢 Spero
📍 Pune
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.