Associate - Security Engineer

Crossbow Labs LLP; Bengaluru Urban; On-site; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Competitive salary and benefits

Medical Insurance

Parental Support - Maternity cover

Retirement Benefits - PF Contribution

Opportunities for professional growth

Collaborative and inclusive work环境

Job summary

Crossbow Labs LLP in Bangalore is seeking a security testing professional with 2+ years of hands-on experience in VAPT and red teaming. You will conduct web app pen testing, research attack vectors, and deliver tailored security solutions for diverse clients.

The role requires strong writing and presentation skills, familiarity with OWASP top vulnerabilities, and the ability to handle escalations while collaborating with clients and teams. A programming language knowledge is a plus.

Qualifications

• At least 2+ years in the security domain.
• Proficient in web application penetration testing.
• Experience in network VAPT and AD penetration testing.
• Skilled in manual testing with Burp Suite Pro, WebInspect, Acunetix.
• Proficient in mobile app pen testing (Android/iOS) and thick client.
• Experience in secure code review (manual and automated).
• Certifications such as OSCP/CRTP/CRTE/CRTO or equivalent are desirable.
• Good presentation, technical writing, and client communication skills.
• Strong knowledge of OWASP standards and common vulnerabilities.
• Red teaming experience is a plus.
• Programming language knowledge is a plus.

Responsibilities

• Write detailed reports on VAPT findings.
• Research attack vectors and present findings.
• Perform red teaming activities.
• Understand client needs and tailor security solutions for complex testing and risk requirements.
• Handle escalations effectively.

Skills

Web app pen testing

VAPT & AD pentesting

Manual testing

Mobile app pen testing

Secure code review

OWASP knowledge

Red teaming

Programming language knowledge

Escalation handling

Tools

Burp Suite Pro

WebInspect

Acunetix

Job description

Bangalore South, India | Posted on 08/18/2026

• Write detailed reports on VAPT findings.
• Perform and present research on various attack vectors.
• Perform red teaming activities.
• Comprehend client needs and deliver security solutions tailored to intricate security testing and risk demands.
• Should be capable of handling escalations.

Requirements

- Should have a minimum of 2+ years or equivalent skills in the security domain.

- Proficient in Web application penetration testing

- Experience in Network VAPT, Active Directory penetration testing.

- Skilled in manual testing and using Burp Suite Pro, WebInspect, Acunetix

- Proficient in mobile application penetration testing (android and iOS) and thick client.

- Experience in secure code review (manual and automated).

- Certified in any of these certifications - OSCP, CRTP, CRTE, CRTO and any other relevant.

- Good presentation and technical writing skills. Strong communication and good customer handling skills.

- Good knowledge on OWASP security standards. Deep understanding of common security vulnerabilities.

- Experience in red teaming activities is a plus.

- Experience with any programming language is a plus.

• Competitive salary and benefits
  
• Medical Insurance
  
• Parental Support - Maternity cover
  
• Retirement Benefits - PF Contribution
  
• Opportunities for professional growth
  
• Collaborative and inclusive work environment