Associate - Security Engineer

crossbowlabs; Bengaluru South; On-site; INR 800,000 - 1,500,000; Full time

Benefits offered by this job

Competitive salary

Medical Insurance

Parental leave

PF contributions

Growth opportunities

Collaborative environment

Job summary

crossbowlabs in Bengaluru is seeking a security testing professional to perform Web Application PT, Network VAPT, Mobile PT, and code review. You will produce detailed reports on findings and present research on attack vectors, with readiness for red teaming tasks and handling escalations.

The ideal candidate has 2+ years in security, proficiency in Burp Suite Pro, WebInspect, Acunetix, and a solid grasp of OWASP standards. Strong communication and client-facing skills are essential.

Qualifications

• Minimum 2+ years in security domain
• Proficient in web app penetration testing
• Experience in network VAPT and AD pentesting
• Skilled in manual testing with Burp Suite Pro, WebInspect, Acunetix
• Proficient in mobile app pentesting (Android/iOS) and thick clients
• Experience in secure code review (manual/automated)
• Certified in OSCP, CRTP, CRTE, CRTO or equivalent
• Good presentation and technical writing; strong client handling
• Knowledge of OWASP standards and common vulnerabilities
• Red teaming experience is a plus

Responsibilities

• Perform web app, network, mobile, and source code security testing
• Create detailed VAPT reports with findings and remediation
• Present research on attack vectors to clients
• Conduct red team activities and assist with escalations
• Tailor security solutions to client needs and risk requirements

Skills

Web app penetration testing

Network VAPT

Mobile app penetration testing

Source code review

Wireless pen-testing

Red teaming

Threat research

Reporting & documentation

Education

OSCP

CRTP

CRTE

CRTO

Tools

Burp Suite Pro

WebInspect

Acunetix

Job description

Perform Web Application Penetration Testing, Network VAPT, Mobile Application PT, Source code review, Wireless pen-testing. Write detailed reports on VAPT findings. Perform and present research on various attack vectors. Perform red teaming activities. Comprehend client needs and deliver security solutions tailored to intricate security testing and risk demands. Should be capable of handling escalations.

Requirements

• Should have a minimum of 2+ years or equivalent skills in the security domain.
• Proficient in Web application penetration testing
• Experience in Network VAPT, Active Directory penetration testing.
• Skilled in manual testing and using Burp Suite Pro, WebInspect, Acunetix
• Proficient in mobile application penetration testing (android and iOS) and thick client.
• Experience in secure code review (manual and automated).
• Certified in any of these certifications - OSCP, CRTP, CRTE, CRTO and any other relevant.
• Good presentation and technical writing skills. Strong communication and good customer handling skills.
• Good knowledge on OWASP security standards. Deep understanding of common security vulnerabilities.
• Experience in red teaming activities is a plus.
• Experience with any programming language is a plus.

Benefits

• Competitive salary and benefits
• Medical Insurance
• Parental Support - Maternity cover
• Retirement Benefits - PF Contribution
• Opportunities for professional growth
• Collaborative and inclusive work environment