Associate Cybersecurity Consultant

Security Brigade; Mumbai; On-site; INR 800,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary aligned to experience

Hybrid + remote-friendly

Sponsorship for offensive security certifications

Internal lab environment

Mentorship from senior researchers

Job summary

Security Brigade is hiring an Associate Cybersecurity Consultant in Mumbai, India. The role focuses on hands-on security assessments including web and mobile application testing, network vulnerability assessments, and API security, providing structured mentorship to grow your skills in offensive security.

Ideal candidates have 1-3 years of experience, strong problem-solving and communication skills, and a proactive approach to security challenges. The position offers a competitive salary, sponsorship for certifications, and a hybrid work environment.

Qualifications

• 1–3 years of hands-on security testing experience.
• Real understanding of common security issues and exploitation techniques.
• Strong written and spoken English for client-quality reports.

Responsibilities

• Run web and mobile application security testing.
• Identify and exploit vulnerabilities in applications and networks.
• Manage engagement timelines and customer interactions.
• Produce reports with remediation guidance.
• Research emerging security topics and write tools/scripts.

Skills

Security testing experience

Understanding of security issues

Manual testing approach

Development knowledge of a programming language

Application and network security fundamentals

Strong English communication

Familiarity with frameworks like React/Django

Knowledge of offensive toolchain

Tools

Burp Proxy

Acunetix

sqlmap

Nmap

Nessus

Metasploit

Job description

Run hands-on application, network, and cloud security testing with structured senior review and direct customer interaction from day one.

application security penetration testing OWASP Top 10 burp suite manual testing reporting API security cloud security

Ready to apply?

Send us your CV and a short note on why this role excites you.

Security Brigade is hiring an Associate Cybersecurity Consultant to join our offensive security practice. You will run hands-on security assessments — web and mobile application testing, network vulnerability and penetration testing, source code review, configuration review, cloud security, and API security — and you will be reviewed end-to-end through our L1/L2/L3 senior chain so you grow under structured mentorship. You will work directly with customers across BFSI, fintech, healthcare, government, and tech-sector enterprises. This is a strong fit for engineers one to three years out of college who want a real path into deep offensive security.

What You\'ll Do

• Run web and mobile application security testing, vulnerability assessments, source code reviews, configuration reviews, cloud security, and API security testing
• Profile applications, model threats, and design test cases to target identified threats — across modern stacks
• Identify and exploit vulnerabilities in applications and networks; document with reproducible proof-of-concept
• Manage engagement timelines and customer interactions across delivery
• Produce reports against internal templates with clear remediation guidance
• Run customer-facing remediation conversations with engineering teams
• Research emerging security topics and new attack techniques — and write tools / scripts to operationalise them
• Contribute to internal knowledge-sharing and Lemon platform improvements

What We\'re Looking For

• 1–3 years of hands-on security testing experience (internships and serious lab work count)
• Real working understanding of common security issues, exploitation techniques, and remediation — beyond memorised OWASP Top 10
• Disciplined manual testing approach — automated scanners are a start, not a finish
• Working development knowledge of at least one modern programming language
• Strong understanding of application and network security fundamentals
• Strong written and spoken English for client-quality reports and direct customer interaction
• Familiarity with frameworks like React / Django and the threat models that come with them
• Working knowledge of the standard offensive toolchain (Burp Proxy, Acunetix, sqlmap, Nmap, Nessus, Metasploit)

What We Offer

• Competitive salary aligned to experience
• Hybrid + remote-friendly
• Sponsorship for offensive security certifications (OSCP, eWPTX, CRTO, BSCP)
• Internal lab environment + dedicated research time
• Mentorship from L2 / L3 senior researchers on every engagement
• Active community involvement (OWASP, Null, Nullcon) supported and encouraged