Cyber Security Analyst

We are Hiring at Valuelabs - Cybersecurity Architect / Manager & Analysts Full Time | Long Term | Opto Platform

Are you a hands on Security Leader who can own Vulnerability management end to end? We want to talk to you.

The Role :

Own Opto's Vulnerability Management strategy. Define "Clean" -- and keep us there.

Hands on across Scrum Teams via PFED.

Key Responsibilities:

Required

Java, Spring Boot, Maven production-grade, ships code

Snyk and SonarQube administration

SAST, DAST, and pen test lifecycle ownership

Vulnerability triage (CVE, CWE, CVSS) and root-cause analysis

At least one shipped compliance framework (SOC 2, ISO 27001, or NIST)

Executive reporting and stakeholder management

Nice to Have

CISSP, CSSLP, or OSCP

SBOM and supply chain tooling (Trivy, Dependabot)

AWS security

Reports to Cybersecurity Manager. Measured on burn-down rate, MTTR, false-positive rate, and certification milestones.

Role 2: Cybersecurity Developer

Contract / Temporary

You will fix vulnerabilities, rotate scrum teams per PFED, ship and move on. A hands-on remediation specialist who thrives in unfamiliar codebases.

Key Responsibilities

Remediate Snyk, SonarQube, SAST, DAST, and pen test findings

Pull from PFED fix, validate, move

Embed short-term in scrum teams; match their cadence and standards

Validate locally and in CI before handoff

Document remediation patterns for reuse

Required

Java, Spring Boot, Maven production-grade

Read and act on Snyk and SonarQube output (fix or suppress correctly)

Drop into unfamiliar codebases without ramp handholding

Git, CI/CD, unit and integration testing

Nice to Have

Prior vulnerability remediation experience

Spring Security, OAuth2/OIDC

Dependency upgrade fluency (BOM, transitive resolution)

Reports to Cybersecurity Manager. Measured on tickets closed per sprint, retest pass rate, and rework rate.

How to Apply

Interested candidates or if you know someone who'd be a great fit please send your CV to ramya.naviri@valuelabs.com along with below required details.

CTC

ECTC

Notice Period (Immediate only)

Please Visit https://www.valuelabs.com/ to know more about company

Referrals welcome. Let's build secure software, together.