Ahmedabad · Sharjah · hybrid
Aphelion Cyber hires cybersecurity engineers, SOC analysts and GRC consultants in Ahmedabad, with delivery work from Sharjah. We are a small company founded in 2024, which is a real thing to weigh up: more scope and less scaffolding than a large firm, and you will be named on the report you wrote.
We keep applications open year-round for the role families below rather than posting a requisition and closing it. If your discipline is here and your work is good, write to us. The worst outcome is a conversation and a clear answer.
Role families
01 / 03These are the disciplines we hire into. Where a specific opening exists it will say so; where it does not, a strong application still gets read.
Web, mobile, API, cloud and internal network testing under the methodology Jaimin Somani sets. You will write the findings you found, defend them in the client walkthrough, and re-test your own work. We care more about what you can demonstrate than which certificate you hold: bring a write-up, a CTF record, a CVE, a tool you built.
Triage on a real queue, on shift, with a documented disposition on every alert you close. L1 is a genuine entry route: if you can read a log, reason about what is normal, and write clearly, the rest is teachable. L2 owns escalation, detection tuning and the handover into incident response.
ISO 27001, SOC 2, GDPR, HIPAA and the DPDP Act: running readiness programmes, mapping control sets across frameworks, and sitting beside a client at the audit. Suits someone who finds the evidence question more interesting than the policy template.
Node.js services, a graph engine, and a React command centre that has to run with no internet connection at all. Air-gapped delivery makes ordinary engineering decisions interesting: no telemetry, no cloud dependency, and updates that arrive as a signed bundle somebody carries in.
A small number, taken seriously. You will be on real engagements with a named supervisor and your work will be reviewed line by line before it reaches a client. Final-year students and career changers both welcome; a portfolio beats a transcript.
Detection engineering, OT security, secure development, technical writing. If you are strong at something adjacent and can explain why it matters here, write anyway. The role families above are where we are usually hiring, not a boundary.
How we hire
02 / 03A CV and a few lines on what you want to work on. If you have public work (a write-up, a repository, a disclosure) send that instead of a covering letter.
Reply within a weekSixty minutes with someone who does the job. We talk through something you have actually done rather than quizzing you on trivia, and you get to ask what the work is really like.
Scoped to a few hours, related to the role, and never unpaid work on a live client engagement. For testers, a target and a report. For GRC, a control set and an evidence question. For engineers, a code review.
You will meet at least one of the three people on the About page. If it is a no, you will hear that too, with the reason, rather than silence.
Before you apply
03 / 03You will not spend a year on one workstream. You will also not find a large firm’s training programme waiting for you. The learning here happens on engagements, with review, which suits some people and not others.
Reports go out with the tester who wrote them named on the front. That is a good deal when the work is strong, and it is an obligation when it is not.
Ahmedabad is the main practice; Sharjah handles UAE delivery. SOC roles work shifts, including nights, which is the honest part of a 24/7 service and is compensated as such.
Applications go to secure@aphelioncyber.com with the role family in the subject line. We do not use a tracking system that swallows applications, and we do not ask for a fee at any stage of hiring. If anyone claiming to represent Aphelion Cyber asks you for money, it is not us.
A personalised walkthrough and a free readiness assessment against the frameworks you are actually being asked for. Pick a time that suits you, or write to us. We reply within one business day.