Associate / Security Consultant

Payatu; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Payatu is seeking security professionals to perform security assessments of web applications, APIs, and services across platforms. You will back findings with PoC exploits, collect evidence, and maintain detailed write-ups.

You will leverage AI to speed up research while preserving a hands-on attacker mindset. You will understand business impact of findings, demonstrate vulnerabilities to owners, and provide remediation guidance.

Qualifications

• Strong fundamentals of applying and networking protocols.
• Stronghold on Web application security concepts and penetration testing skills.
• Good command of at least one programming language.
• Good understanding of OWASP Top 10, CWE, CVSS, and common attack techniques.
• Hands-on experience in performing penetration testing of web applications and APIs.
• Experience assessing AI powered applications.

Responsibilities

• Security assessment of web applications, APIs and web services on various platforms.
• Back your findings with Proof-of-concept exploits. Collect evidence and maintain a detailed write-up of the findings.
• Leverage AI mindfully to enhance security assessments, accelerate research, and automate repetitive tasks while maintaining a strong manual testing and attacker mindset.
• Understand and explain the results with impact on business and compliance status.
• Explain and demonstrate vulnerabilities to application/system owners.
• Provide appropriate remediation and mitigations of the identified vulnerabilities.
• Individually or collaboratively review the system designs, source code, configurations, communications for security gaps.
• Deliver results within stipulated timelines.
• Sharpen your saw with continuous research, learning, training on the latest tools and techniques, keeping up with new research, and sharing the same with the ecosystem.
• Communicate well using verbal and written skills, within and out of the team.

Skills

Web security

Penetration testing

Network protocols

OWASP Top 10

Job description

Who we are?

Payatu is an ISO certified company where we strive to create a culture of excellence, growth, and innovation that empowers our employees to reach new heights in their careers. We are young and passionate folks driven by the power of the latest and innovative technologies in IoT, AI/ML, Blockchain, and many other advanced technologies. We are on the mission of making Cyberworld safe for every organization, product, and individual.

What we look for outside work parameters?

Your expertise is your primary qualification, not your degree or certification.

Your publicly known contributions are your credentials.

Papers you have written, tools you have developed are your references.

Your write-up reflects your interests and ethics.

Your published exploits, your CTF scores, and hall of fame listings are the testimonies of your work.

Your research paper was published and presented at conferences.

You are learning from the community and enthusiastically contributing back.

You are a perfect technical fit if:

Strong fundamentals of application and network protocols.

Stronghold on Web application security concept and penetration testing skill.

Good command of at least one programming language.

Good understanding of OWASP Top 10, CWE, CVSS, and common attack techniques.

Hands-on experience in performing penetration testing of web applications and APIs.

Experience assessing AI powered applications.

Good to have experience in working alongside the development/QA teams.

Good report writing and presentation skills.

Should be able to suggest optimum security improvements to application components.

You Have All Our Desired Qualities, if:

Experience in manual security assessment of web applications, APIs, and modern web technologies.

You have a history of publishing or presenting good research.

You have the knack of finding security bugs in everything you touch.

You have excellent written and verbal communication skills and the ability to express your thoughts clearly.

You have the skill to articulate and present technical things in business language.

You can work independently as well as within a team and meet project schedules and deadlines.

You have strong problem solving, troubleshooting, and analysis skills.

You are passionate about your area of expertise and self-driven.

You are comfortable working in a dynamic and fast-paced work environment.

You are Self-driven, proactive, hardworking, team-player.

You are working on something on your own in your field apart from official work.

Your everyday work will look like:

Security assessment of web applications, APIs and web services on various platforms.

Back your findings with Proof-of-concept exploits. Collect evidence and maintain a detailed write-up of the findings.

Leverage AI mindfully to enhance security assessments, accelerate research, and automate repetitive tasks while maintaining a strong manual testing and attacker mindset.

Understand and explain the results with impact on business and compliance status.

Explain and demonstrate vulnerabilities to application/system owners.

Provide appropriate remediation and mitigations of the identified vulnerabilities.

Individually or collaboratively review the system designs, source code, configurations, communications for security gaps.

Deliver results within stipulated timelines.

Sharpen your saw with continuous research, learning, training on the latest tools and techniques, keeping up with new research, and sharing the same with the ecosystem.

Communicate well using verbal and written skills, within and out of the team.