Offensive Security Engineer

1 week ago

Mumbai, Maharashtra, India Fynd Full time ₹ 12,00,000 - ₹ 36,00,000 per year

Fynd is India's largest omnichannel platform and a multi-platform tech company specialising in retail technology and products in AI, ML, big data, image editing, and the learning space. It provides a unified platform for businesses to seamlessly manage online and offline sales, store operations, inventory, and customer engagement. Serving over 2,300 brands, Fynd is at the forefront of retail technology, transforming customer experiences and business processes across various industries.

At Fynd, we're looking for an Offensive Security Engineer to lead red teaming and penetration testing efforts across our digital ecosystem. You'll simulate real-world attacks, identify complex vulnerabilities, and partner with teams to strengthen our security posture—from product design to production. This role is ideal for engineers passionate about adversary emulation, building tools, and driving secure innovation at scale.

What will you do at Fynd?

  • Conduct deep-dive penetration testing and red team simulations on web, mobile, cloud, APIs, and thick client systems.
  • Perform proactive threat modeling during product development to identify design-stage risks.
  • Build custom scripts/tools and automate offensive security workflows.
  • Report technical findings with clear, actionable remediation strategies.
  • Collaborate with engineering and product teams to embed offensive security into the SDLC.
  • Stay updated on latest threat techniques, CVEs, exploits, and red team tooling.

Some more requirements

  • 5+ years in offensive security, penetration testing, or red teaming.
  • Experience with OWASP Top 10, ASVS, MITRE ATT&CK, and threat modeling frameworks.
  • Hands-on with cloud platforms (AWS/GCP/Azure), thick clients, and secure app architecture.
  • Proficiency in scripting (Python, Go, Bash) and tools like Burp Suite, ZAP, Metasploit, Cobalt Strike.
  • Strong communication and reporting skills for both technical and business audiences.

Additional Skills

  • Experience in ecommerce or AI/ML-driven platforms.
  • Prior work in vulnerability research, CVE publication, or exploit development.
  • Certifications: OSCP, OSWE, OSEP, CRTO or cloud security certs.
  • Contributions to open-source tools, blogs, or conferences in the infosec community.

What do we offer?

Growth

Growth knows no bounds, as we foster an environment that encourages creativity, embraces challenges, and cultivates a culture of continuous expansion. We are looking at new product lines, international markets and brilliant people to grow even further. We teach, groom and nurture our people to become leaders. You get to grow with a company that is growing exponentially.

Flex University: We help you upskill by organising in-house courses on important subjects

Learning Wallet: You can also do an external course to upskill and grow, we reimburse it for you.

Culture

Community and Team building activities

Host weekly, quarterly and annual events/parties.

Wellness

Mediclaim policy for you + parents + spouse + kids

Experienced therapist for better mental health, improve productivity & work-life balance

We work from the office 5 days a week to promote collaboration and teamwork. Join us to make an impact in an engaging, in-person environment

  • Senior Security Engineer

    2 weeks ago

    Mumbai, Maharashtra, India TAC Security Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Job DescriptionAs a Security Engineer VAPT, you will be responsible for conducting comprehensive security assessments, identifying vulnerabilities, and implementing effective remediation strategies.Leveraging your expertise in penetration testing and ethical hacking, you will play a key role in enhancing the security posture of our clients' systems and...

  • Senior Security Engineer

    5 days ago

    Mumbai, Maharashtra, India TAC Security Full time ₹ 6,00,000 - ₹ 18,00,000 per year

    Job descriptionAs a Security Engineer - VAPT, you will be responsible for conducting comprehensive security assessments, identifying vulnerabilities, and implementing effective remediation strategies. Leveraging your expertise in penetration testing and ethical hacking, you will play a key role in enhancing the security posture of our clients' systems and...

  • Red Team Offensive Security Specialist

    2 days ago

    Mumbai, Maharashtra, India eSec Forte® Technologies Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Company DescriptioneSec Forte Technologies is a CMMi Level 3 certified global leader in IT security services, offering solutions in Cloud Security, Cyber Forensics, Security Audit, Red Team Assessment, Threat Hunting, and more. The company is an empaneled vendor for Information Security Auditing Services by CERT-India and a recognized PCI DSS QSA firm,...

  • Endpoint Security Engineer

    2 weeks ago

    Mumbai, Maharashtra, India Sattrix Information Security Full time

    Device Management (Endpoint) Support Engineers – L1 & L2Location: Chennai, Hyderabad and MumbaiMode: work from office (5 days)Shifts: Rotational Shifts (24x7)Budget - L1: 6-7 LPA; L2: 15-18 LPASkills required (End Point Security):Sentinal OneCarbon BlackAruba - NACDAM - ImpervaDSF - ImpervaJob Overview:We are looking forDevice Management L1 and L2 Support...

  • Network Security Engineer

    5 days ago

    Mumbai, Maharashtra, India Sattrix Information Security Full time ₹ 4,00,000 - ₹ 12,00,000 per year

    Job Title:Network Security Engineers (L1 / L2 / L3)Location:Chennai / Mumbai / HyderabadEmployment Type:Full-time | Client RoleShifts: Rotational ShiftsWork Mode:Work from OfficeAbout the Role:We are looking for highly skilled and motivatedNetwork Security Engineers (L1, L2 & L3). You'll be responsible for managing, operating, and optimizing a wide range of...

  • Senior Manager- Cyber security

    1 week ago

    Mumbai, Maharashtra, India ERM Placement Services Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Skills:Excellent communication skillsExperience with architecture and implementation of SOAR solutionsStrong scripting skills in either python (strongly preferred) or powershell for automation in Windows and Linux environmentsExperience with Linux shell scriptingGood understanding of the offensive and defensive sides of securityExpert level experience in...

  • Network Security

    1 week ago

    Mumbai, Maharashtra, India Sattrix Information Security Full time ₹ 8,00,000 - ₹ 25,00,000 per year

    Device Management (IDM) Support Engineers – L1, L2 & L3Location: Chennai, Hyderabad and MumbaiIDM (Skills required):Forcepoint - DLPRSAFIM - Trellix/TripwireSeclorePIM - Arcon / Cyber ArcEmail - O 365 - DefenderOpen Positions:L3 - Device Management Support Engineer / SMEExperience: 10–12 years (Minimum 7 years in Security Operations, Architecture &...

  • Sr. Information Security Consultant

    2 weeks ago

    Navi Mumbai, Maharashtra, India Tinycrows Private Limited Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Position:Sr. Information Security ConsultantLocation:NaviMumbai, IndiaExperience:Minimum of 4 to 5 years (relevant to the position and job responsibility)Company Profile:Tinycrows Private Limited is a budding cybersecurity firm working with BFSI, fintech, and technology-driven enterprises dedicated to helping these businesses protect their digital assets and...

  • Security Engineer

    2 weeks ago

    Mumbai, Maharashtra, India JioStar Full time ₹ 9,00,000 - ₹ 12,00,000 per year

    Role Summary: As an Application Security Engineer at JioStar, you will play a critical role in safeguarding our products and user data. You'll work at the intersection of engineering and security—integrating best practices across the development lifecycle, identifying vulnerabilities in web and mobile platforms, and proactively addressing risks from design...

  • Security Engineer

    1 week ago

    Mumbai, Maharashtra, India JioStar Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Role Summary: As an Application Security Engineer at JioStar, you will play a critical role in safeguarding our products and user data. You'll work at the intersection of engineering and security—integrating best practices across the development lifecycle, identifying vulnerabilities in web and mobile platforms, and proactively addressing risks from design...