Senior Security Consultant

Job Description Job Description - Location: Remote (India preferred) - Engagement: Full-time - Compensation: 9-13 LPA + ESOP Role Snapshot - Lead security research initiatives and work directly with the founding team to architect and scale APS (Autonomous Pentesting Solution), our flagship product that's redefining security testing with AI. - Drive complex VAPT engagements, mentor the security team, and define the technical roadmap for autonomous security testing. - Expect end-to-end ownership of product security features, strategic decision-making, and direct influence on company direction. What You'll Tackle - Lead and execute end-to-end VAPT engagements across web applications, mobile apps, APIs, thick clients, and cloud infrastructure for high-profile clients. - Architect core security modules within APS, designing and implementing advanced AI/LLM-driven vulnerability detection and exploitation systems. - Conduct original vulnerability research, discover zero-days, and develop sophisticated exploitation techniques and attack chains. - Lead technical discussions with clients, deliver executive-level security reports, and provide strategic remediation guidance. - Mentor junior researchers and interns, conduct code reviews, and establish security research best practices. - Drive the product roadmap by identifying new attack vectors, emerging threats, and innovative approaches to autonomous pentesting. - Collaborate with the founding team on strategic initiatives, partnerships, and scaling the security research function. What Makes You a Strong Fit - 2-3 years of hands-on experience in penetration testing, security research, or offensive security roles with proven track record. - Expert-level understanding of web, mobile, API, and thick client security with deep exploitation expertise across multiple attack surfaces. - Notable achievements on Bugcrowd, HackerOne, or similar platforms (Hall of Fame, high-severity findings, or CVE contributions strongly preferred). - Strong presence in the CTF community with top rankings, team leadership, or writeup contributions. - Advanced proficiency with security tools and custom tool development (Burp Suite, Metasploit, Frida, custom Python frameworks). - Demonstrated ability to discover and chain complex vulnerabilities for high-impact exploitation. - Experience with cloud security (AWS/Azure/GCP), container security, or infrastructure pentesting. - Strong Python development skills with portfolio of security automation tools or open-source contributions. - Industry certifications such as OSCP, OSWE, OSEP, CPTS, or equivalent demonstrated expertise. - Published security research, blog posts, conference presentations, or technical writeups. - Excellent communication skills with ability to explain complex technical concepts to both technical and non-technical audiences. - Proven leadership experience mentoring junior security professionals or leading technical initiatives. Interview Process - Founder Call (45 min) career trajectory, technical vision, culture add. - Technical Assessment (72 h) advanced multi-stage security challenge covering complex attack scenarios. - Security Lead Round (90 min) comprehensive technical deep dive, solution walkthrough, and strategic discussion. - Offer Letter What You'll Gain - Leadership opportunity with direct impact on product strategy and company direction. - Work closely with founders to build and scale a cutting-edge security product from the ground up. - Exposure to cutting-edge AI/LLM integration in cybersecurity and opportunity to push the boundaries of autonomous security testing. - Significant equity stake in a fast-growing security startup with strong market potential. - Freedom to pursue original research, publish findings, and represent the company at security conferences. - Competitive compensation package with performance-based growth opportunities. - Flexible work arrangements and autonomy to drive technical decisions. How to Apply Email [Confidential Information] with: - Resume or LinkedIn profile. - Bugcrowd, HackerOne, HackTheBox, TryHackMe profile links with notable achievements. - Portfolio of security work (GitHub, published research, CVEs, blog posts, conference talks, or significant vulnerability disclosures).