Associate - Security Engineer

Crossbow Cybersecurity; Bengaluru; On-site; INR 600,000 - 1,200,000; Full time

Benefits offered by this job

Medical Insurance

PF Contribution

Career Growth

Collaborative Environment

Job summary

Crossbow Cybersecurity in Bengaluru is seeking a security testing professional to perform Web/App/Mobile VAPT, conduct research on attack vectors, and execute red teaming activities. The role involves delivering tailored security solutions to complex testing and risk demands while handling client escalations.

Candidates should have 2+ years in security, strong hands-on testing with Burp Suite Pro, WebInspect, Acunetix, and deep knowledge of OWASP standards.

Qualifications

• : Minimum 2+ years of experience in the security domain.
• : Proficient in web application penetration testing.
• : Experience in network VAPT and Active Directory penetration testing.
• : Skilled in manual testing and using Burp Suite Pro, WebInspect, Acunetix.
• : Proficient in mobile application penetration testing (Android and iOS) and thick client.
• : Experience in secure code review (manual and automated).
• : Certified OSCP, CRTP, CRTE, CRTO or equivalent.
• : Good presentation and technical writing skills; strong communication and customer handling.
• : Good knowledge of OWASP security standards and common vulnerabilities.
• : Experience in red teaming is a plus.
• : Programming knowledge is a plus.

Responsibilities

• Write detailed reports on VAPT findings.
• Perform and present research on various attack vectors.
• Perform red teaming activities.
• Comprehend client needs and deliver security solutions tailored to intricate security testing and risk demands.
• Should be capable of handling escalations.

Skills

Web application pentesting

Network VAPT

AD pentesting

Manual testing

Burp Suite Pro

Mobile pentesting

Thick client pentesting

Secure code review

OWASP standards

Red teaming

Programming basics

Education

OSCP

CRTP

CRTE

CRTO

Tools

Burp Suite Pro

WebInspect

Acunetix

Job description

• Write detailed reports on VAPT findings.
• Perform and present research on various attack vectors.
• Perform red teaming activities.
• Comprehend client needs and deliver security solutions tailored to intricate security testing and risk demands.
• Should be capable of handling escalations.

• Perform Web Application Penetration Testing, Network VAPT, Mobile Application PT, Source code review, Wireless pen-testing.
• Write detailed reports on VAPT findings.
• Perform and present research on various attack vectors.
• Perform red teaming activities.
• Comprehend client needs and deliver security solutions tailored to intricate security testing and risk demands.
• Should be capable of handling escalations.

Requirements

• Should have a minimum of 2+ years or equivalent skills in the security domain.
• Proficient in Web application penetration testing
• Experience in Network VAPT, Active Directory penetration testing.
• Skilled in manual testing and using Burp Suite Pro, WebInspect, Acunetix
• Proficient in mobile application penetration testing (android and iOS) and thick client.
• Experience in secure code review (manual and automated).
• Certified in any of these certifications - OSCP, CRTP, CRTE, CRTO and any other relevant.
• Good presentation and technical writing skills. Strong communication and good customer handling skills.
• Good knowledge on OWASP security standards. Deep understanding of common security vulnerabilities.
• Experience in red teaming activities is a plus.
• Experience with any programming language is a plus.

Benefits

• Competitive salary and benefits
• Medical Insurance
• Parental Support - Maternity cover
• Retirement Benefits - PF Contribution
• Opportunities for professional growth
• Collaborative and inclusive work environment