Cyber Security Analyst - 2

Role: Cyber Security Analyst - 2

Location: Bangalore

Department: Platform Engineering / Security

Experience: 3–8 Years

About Styli Marketplace

Launched in 2019 by Landmark Group, Styli Marketplace is the first e-commerce venture of the group, quickly becoming a leading online destination for fashion and lifestyle across the GCC, including Saudi Arabia, the UAE, Kuwait, Bahrain, and beyond. Styli connects global sellers and creators with millions of fashion-forward customers, offering the latest trends, exceptional value, and convenient services like same-day to 48-hour delivery and flexible payment options. Our mission is to make style accessible, aspirational, and exciting for all, backed by a passionate team fostering a culture of creativity and innovation. At Styli, we aim to revolutionize fashion retail and bring unique experiences to our customers.

Role Overview

We are looking for a driven and hands-on Cybersecurity Engineer to join our security engineering team. You will be responsible for protecting Styli's digital infrastructure, customer data, and application ecosystem against evolving threats. This is a high-impact role where you will work across AppSec, cloud security, and SecOps to build security capabilities that scale with our growth.

What You'll Do

Application & Product Security

• Conduct threat modelling, security design reviews, and code-level security assessments for new features and product releases.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines to shift security left.
• Perform regular vulnerability assessments and penetration testing of web and mobile applications (Android/iOS).
• Partner with engineering teams to remediate findings and track closure SLAs.

Cloud & Infrastructure Security

• Secure cloud environments (AWS / GCP) including IAM hardening, VPC configurations, S3 bucket policies, and secrets management.
• Implement and maintain container security controls — image scanning, runtime protection, Kubernetes policy enforcement (OPA/Kyverno).
• Define and audit Infrastructure-as-Code (Terraform) for security misconfigurations using tools like Checkov or tfsec.

Security Operations & Incident Response

• Monitor SIEM and alerting pipelines; triage, investigate, and respond to security incidents.
• Develop detection rules and playbooks to reduce mean time to detect (MTTD) and respond (MTTR).
• Conduct post-incident reviews and drive root cause analysis with actionable hardening recommendations.

Compliance & Risk

• Support various data privacy compliance programs relevant to e-commerce operations.
• Conduct vendor and third-party security assessments.
• Maintain security documentation, risk registers, and evidence artifacts for audits.

What We're Looking For

Required

• 3–8 years of hands-on experience in cybersecurity engineering or related roles.
• Strong knowledge of OWASP Top 10, common web vulnerabilities (SQLi, XSS, SSRF, IDOR, etc.), and secure coding practices.
• Experience securing cloud environments — AWS or GCP. Preferably GCP.
• Hands-on experience with security tooling: Burp Suite, Nessus/Qualys, Trivy, Snyk, SonarQube, or equivalents.
• Proficiency in at least one scripting language: Python, Bash, or Go — for automation and tooling.
• Solid understanding of networking fundamentals: TCP/IP, DNS, TLS, HTTP/S, firewalls, proxies.
• Experience integrating security into CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).

Good to Have

• Experience with bug bounty programs (HackerOne / Bugcrowd) — either as a participant or a program operator.
• Familiarity with API security (REST, GraphQL) in high-traffic e-commerce or fintech environments.
• Knowledge of container and Kubernetes security hardening.
• Relevant certifications: CEH, OSCP, AWS Security Specialty, CCSP, or CompTIA Security+.
• Prior experience in e-commerce, fintech, or payments-adjacent environments.