Offensive Security Engineer

2 weeks ago

Mumbai, Maharashtra, India Fynd Full time ₹ 12,00,000 - ₹ 36,00,000 per year

Fynd is India's largest omnichannel platform and a multi-platform tech company specialising in retail technology and products in AI, ML, big data, image editing, and the learning space. It provides a unified platform for businesses to seamlessly manage online and offline sales, store operations, inventory, and customer engagement. Serving over 2,300 brands, Fynd is at the forefront of retail technology, transforming customer experiences and business processes across various industries.

At Fynd, we're looking for an Offensive Security Engineer to lead red teaming and penetration testing efforts across our digital ecosystem. You'll simulate real-world attacks, identify complex vulnerabilities, and partner with teams to strengthen our security posture—from product design to production. This role is ideal for engineers passionate about adversary emulation, building tools, and driving secure innovation at scale.

What will you do at Fynd?

  • Conduct deep-dive penetration testing and red team simulations on web, mobile, cloud, APIs, and thick client systems.
  • Perform proactive threat modeling during product development to identify design-stage risks.
  • Build custom scripts/tools and automate offensive security workflows.
  • Report technical findings with clear, actionable remediation strategies.
  • Collaborate with engineering and product teams to embed offensive security into the SDLC.
  • Stay updated on latest threat techniques, CVEs, exploits, and red team tooling.

Some more requirements

  • 5+ years in offensive security, penetration testing, or red teaming.
  • Experience with OWASP Top 10, ASVS, MITRE ATT&CK, and threat modeling frameworks.
  • Hands-on with cloud platforms (AWS/GCP/Azure), thick clients, and secure app architecture.
  • Proficiency in scripting (Python, Go, Bash) and tools like Burp Suite, ZAP, Metasploit, Cobalt Strike.
  • Strong communication and reporting skills for both technical and business audiences.

Additional Skills

  • Experience in ecommerce or AI/ML-driven platforms.
  • Prior work in vulnerability research, CVE publication, or exploit development.
  • Certifications: OSCP, OSWE, OSEP, CRTO or cloud security certs.
  • Contributions to open-source tools, blogs, or conferences in the infosec community.

What do we offer?

Growth

Growth knows no bounds, as we foster an environment that encourages creativity, embraces challenges, and cultivates a culture of continuous expansion. We are looking at new product lines, international markets and brilliant people to grow even further. We teach, groom and nurture our people to become leaders. You get to grow with a company that is growing exponentially.

Flex University: We help you upskill by organising in-house courses on important subjects

Learning Wallet: You can also do an external course to upskill and grow, we reimburse it for you.

Culture

Community and Team building activities

Host weekly, quarterly and annual events/parties.

Wellness

Mediclaim policy for you + parents + spouse + kids

Experienced therapist for better mental health, improve productivity & work-life balance

We work from the office 5 days a week to promote collaboration and teamwork. Join us to make an impact in an engaging, in-person environment

  • Senior Security Engineer

    7 days ago

    Mumbai, Maharashtra, India, Maharashtra TAC Security Full time

    Job descriptionAs a Security Engineer - VAPT, you will be responsible for conducting comprehensive security assessments, identifying vulnerabilities, and implementing effective remediation strategies. Leveraging your expertise in penetration testing and ethical hacking, you will play a key role in enhancing the security posture of our clients' systems and...

  • Application Security Engineer

    2 days ago

    Mumbai, Maharashtra, India Security Lit Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    Job Description: Application Security Engineer (L2)Role OverviewWe are seeking an experienced Application Security Engineer (L2) to take a lead role in our security testing team. This role requires of 3 year experience (first priority will be given to more than 4 year experience resources for selection) and mandates professional security certifications. You...

  • Senior Security Engineer

    2 weeks ago

    Navi Mumbai, Maharashtra, India Eventus Security Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    Job Title: Senior Security EngineerJob Location: Navi MumbaiExperience: 3+yrsKey Responsibilities:Provide Tier 1 and Tier 2 technical support for Trend Micro products, including but not limited to:Trend Micro Apex One and Vision One.Deep Security and Vision One Pro.Cloud App Security and Email Security for Exchange.DDI/DDAN/Tipping Point/SMS/DDEI...

  • PreSales Security Consultant Cybersecurity

    2 weeks ago

    Mumbai, Maharashtra, India People Equation Full time ₹ 15,00,000 - ₹ 20,00,000 per year

    Job Description - Pre-Sales Security Consultant CybersecurityWe're building more than a cybersecurity product — we're creating and leading the category of Continuous Automated Red Teaming (CART) and Automated Pen Testing. Our AI-based platform emulates real-world attacks across enterprise environments to proactively discover and prioritize exposures —...

  • Security Engineer II

    2 weeks ago

    Mumbai, Maharashtra, India Upstox Full time ₹ 8,00,000 - ₹ 24,00,000 per year

    Job Description Upstox is seeking a highly skilled Senior Security Engineer to join our Cyber Defence team. The ideal candidate will have extensive experience in cybersecurity, particularly in SOC (Security Operations Center) operations across all levels (L1, L2, and L3). The candidate should possess advanced expertise in SIEM (Security Information and...

  • Ethical Hacker

    6 days ago

    Mumbai, Maharashtra, India Crisil Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Job Summary:We are looking for an experienced Senior Engineer – Information Security to lead and manage our red team operations. The ideal candidate will be responsible for conducting advanced red teaming assessments, managing and mentoring the red team, coordinating with cross-functional teams including Purple, Blue, and ASR teams, and driving the...

  • Security Head

    4 days ago

    Navi Mumbai, Maharashtra, India Mindgate Solutions Full time ₹ 25,00,000 - ₹ 40,00,000 per year

    Dear Candidates,Greetings from Mindgate Role & responsibilitiesWe are seeking a dynamic and experienced Head of Security to lead the cybersecurity function for our critical UPI platform engagement. This isa senior, hands-on leadership role responsible for defining and executing the overall security posture, strategy, and operations for the entireprogram....

  • Network Security

    2 weeks ago

    Mumbai, Maharashtra, India Sattrix Information Security Full time ₹ 8,00,000 - ₹ 25,00,000 per year

    Device Management (IDM) Support Engineers – L1, L2 & L3Location: Chennai, Hyderabad and MumbaiIDM (Skills required):Forcepoint - DLPRSAFIM - Trellix/TripwireSeclorePIM - Arcon / Cyber ArcEmail - O 365 - DefenderOpen Positions:L3 - Device Management Support Engineer / SMEExperience: 10–12 years (Minimum 7 years in Security Operations, Architecture &...

  • Sr. Application Security Specialist

    4 days ago

    Mumbai, Maharashtra, India Outworx Solutions Full time ₹ 15,00,000 - ₹ 25,00,000 per year

    Level L3Key Focus Area: Application Security (Web, Mobile, API, Cloud, IoT, DevSecOps)Role OverviewWe are seeking a skilled Application Security Specialist (L3) for an individual contributor role. The ideal candidate will assess, design, and improve security across diverse platforms and technologies.Key ResponsibilitiesConduct security assessments for:Web,...

  • Cloud Security Professional

    4 days ago

    Mumbai, Maharashtra, India L&T Technology Services Ltd. Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    LTTS IndiaMumbaiJob DescriptionKey Responsibilities1. Cloud Architecture & Design Design and manage secure cloud architectures across AWS, Azure, GCP, or hybrid environments.Collaborate with DevOps and Infrastructure teams to embed security into cloud-native applications and services.Security Controls Implementation Deploy and manage cloud security tools...