Cyber Security Analyst

ABOUT THE COMPANY Spero Healthcare Innovations Pvt. Ltd. is a healthcare technology organization working to make quality healthcare accessible through innovative, technology-driven solutions. Our teams build and operate digital health platforms and services, where protecting data and systems is central to the trust placed in us. ROLE OVERVIEW We are looking for a Cyber Security Analyst with a strong interest in offensive security and hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), Mobile and API security testing. The candidate will work on identifying, validating, documenting and tracking security vulnerabilities across web applications, APIs and infrastructure. This role is well suited for someone who enjoys practical security testing and wants to build strong fundamentals in application and API security. KEY RESPONSIBILITIES • Perform Vulnerability Assessment and Penetration Testing (VAPT) on web applications, APIs and infrastructure. • Conduct manual and automated security testing to identify vulnerabilities. • Perform web application security testing based on the OWASP Top 10. • Perform basic API security testing, including authentication, authorization, access control, input validation and common API vulnerabilities. • Identify, validate and document security vulnerabilities with appropriate evidence. • Analyze vulnerability scanner results and validate potential false positives. • Prepare security assessment and VAPT reports with vulnerability details, risk ratings, impact, evidence and remediation recommendations. • Track identified vulnerabilities through remediation and perform retesting to verify fixes. • Support security assessments and application security activities. • Collaborate with development and technical teams to understand and communicate security findings. REQUIRED SKILLS • Strong understanding of VAPT and penetration testing methodologies. • Good understanding of the OWASP Top 10. • Basic understanding of web application security and API security. • Basic understanding of HTTP/HTTPS, REST APIs, authentication, authorization, sessions, cookies and security headers. • Good analytical and problem-solving skills. • Ability to document technical findings clearly. GOOD TO HAVE • Experience with TryHackMe, Hack The Box, CTFs or cybersecurity labs. • Relevant cybersecurity projects or security research. • Basic scripting knowledge in Python, Bash or similar languages. • Familiarity with JWT, OAuth, RBAC and API authentication mechanisms. • Basic understanding of Linux and networking. • Familiarity with tools such as MobSF, Snyk, OpenVAS or similar security tools. • Cybersecurity certifications are an advantage but not mandatory. QUALIFICATIONS • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Electronics or a related field. • Candidates with strong hands-on cybersecurity projects and practical security testing experience are encouraged to apply.