Cyber Security Analyst - 2

Role: Cyber Security Analyst - 2
Location: Bangalore
Department: Platform Engineering / Security
Experience: 3–8 Years
About Styli Marketplace
Launched in 2019 by Landmark Group, Styli Marketplace is the first e-commerce venture of the group, quickly becoming a leading online destination for fashion and lifestyle across the GCC, including Saudi Arabia, the UAE, Kuwait, Bahrain, and beyond. Styli connects global sellers and creators with millions of fashion-forward customers, offering the latest trends, exceptional value, and convenient services like same-day to 48-hour delivery and flexible payment options. Our mission is to make style accessible, aspirational, and exciting for all, backed by a passionate team fostering a culture of creativity and innovation. At Styli, we aim to revolutionize fashion retail and bring unique experiences to our customers.
Role Overview
We are looking for a driven and hands-on Cybersecurity Engineer to join our security engineering team. You will be responsible for protecting Styli's digital infrastructure, customer data, and application ecosystem against evolving threats. This is a high-impact role where you will work across AppSec, cloud security, and SecOps to build security capabilities that scale with our growth.
What You'll Do
Application & Product Security
Conduct threat modelling, security design reviews, and code-level security assessments for new features and product releases.
Integrate SAST, DAST, and SCA tools into CI/CD pipelines to shift security left.
Perform regular vulnerability assessments and penetration testing of web and mobile applications (Android/iOS).
Partner with engineering teams to remediate findings and track closure SLAs.
Cloud & Infrastructure Security
Secure cloud environments (AWS / GCP) including IAM hardening, VPC configurations, S3 bucket policies, and secrets management.
Implement and maintain container security controls — image scanning, runtime protection, Kubernetes policy enforcement (OPA/Kyverno).
Define and audit Infrastructure-as-Code (Terraform) for security misconfigurations using tools like Checkov or tfsec.
Security Operations & Incident Response
Monitor SIEM and alerting pipelines; triage, investigate, and respond to security incidents.
Develop detection rules and playbooks to reduce mean time to detect (MTTD) and respond (MTTR).
Conduct post-incident reviews and drive root cause analysis with actionable hardening recommendations.
Compliance & Risk
Support various data privacy compliance programs relevant to e-commerce operations.
Conduct vendor and third-party security assessments.
Maintain security documentation, risk registers, and evidence artifacts for audits.
What We're Looking For
Required
3–8 years of hands-on experience in cybersecurity engineering or related roles.
Strong knowledge of OWASP Top 10, common web vulnerabilities (SQLi, XSS, SSRF, IDOR, etc.), and secure coding practices.
Experience securing cloud environments — AWS or GCP. Preferably GCP.
Hands-on experience with security tooling: Burp Suite, Nessus/Qualys, Trivy, Snyk, SonarQube, or equivalents.
Proficiency in at least one scripting language: Python, Bash, or Go — for automation and tooling.
Solid understanding of networking fundamentals: TCP/IP, DNS, TLS, HTTP/S, firewalls, proxies.
Experience integrating security into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).
Good to Have
Experience with bug bounty programs (HackerOne / Bugcrowd) — either as a participant or a program operator.
Familiarity with API security (REST, GraphQL) in high-traffic e-commerce or fintech environments.
Knowledge of container and Kubernetes security hardening.
Relevant certifications: CEH, OSCP, AWS Security Specialty, CCSP, or CompTIA Security+.
Prior experience in e-commerce, fintech, or payments-adjacent environments.

Work arrangement
No