Cybersecurity Expert

We are seeking a highly skilled Security Specialist with a primary focus on penetration testing and offensive security.

The ideal candidate will be responsible for proactively identifying, exploiting, and reporting security vulnerabilities to protect our systems and data from evolving threats.

• Conduct comprehensive black-box and white-box penetration tests against our web applications, mobile applications, cloud infrastructure to identify and validate security weaknesses.

1. Penetration Testing: Define test suites for pen testing, red teaming and conduct comprehensive black-box and white-box penetration tests against our web applications, mobile applications, cloud infrastructure to identify and validate security weaknesses.
2. Web Application Security: Conduct security assessments and pen tests for web applications, including an understanding of common vulnerabilities beyond the OWASP Top 10.
3. Mobile Application Security: Conduct security assessments, penetration tests and code reviews for iOS and Android mobile applications.
4. Cloud & Network Security: Conduct pen tests on cloud assets, validate vulnerabilities reported by tools including CNAPP, threat monitoring tools and simulate real-world attacks on our cloud environments (e.g., AWS, Azure, GCP) and internal networks to test the effectiveness of existing security controls.
5. Vulnerability Management: Perform continuous vulnerability scanning, manage the vulnerability lifecycle
6. Incident Response: Support the incident response team by providing technical analysis of attack vectors, root cause analysis during incidents and threat intelligence derived from penetration tests.
7. Collaboration: Work closely with development, DevOps and infrastructure teams to provide clear, actionable recommendations for remediation and help build more secure systems.
8. Tooling: Develop and maintain custom scripts and tools to automate testing and analysis.
9. Reporting: Create detailed, high-quality technical and executive-level reports that clearly articulate findings, risks, and recommendations.

• Bachelor's degree in computer science, Information Technology, or a related field, or equivalent practical experience.
• 4-6 years of professional experience in information security, with a strong focus on offensive security.
• Proven hands-on experience in conducting penetration tests for web applications, networks, cloud infrastructure, and mobile applications.
• Deep understanding of the OWASP Top 10, common attack vectors, and exploitation techniques.
• Good knowledge of AWS/Azure and DevSecOps processes and security best practices. Proficiency with penetration testing tools like Burp Suite, Metasploit, Nmap, Kali Linux.
• Strong analytical and problem-solving skills, with the ability to work independently and as part of a team.
• Excellent written and verbal communication skills, including the ability to present complex technical information to non-technical audiences.
• Relevant security certifications such as OSCP, CEH.
• Experience with scripting languages (e.g., Python, Bash) for automation and tool development.
• Familiarity with container security (Docker/Kubernetes/ECS etc.) and attacking containerized environments.
• Knowledge of AI/ML fundamentals, their security and agent development
• Knowledge of common security compliance frameworks (e.g., PCIDSS, ISO 27001, NIST).

• Culture focused on talent development with quarterly promotion cycles and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

• We value diversity and inclusion, inviting applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference.
• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.