Lead Security Engineer

Crossbow Cybersecurity; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Competitive salary and benefits

Medical Insurance

Parental Support – Maternity Leave & Paternity Leave

Retirement Benefits – Gratuity & PF Contribution

Opportunities for professional growth

Collaborative work environment

Job summary

A leading cybersecurity firm in Bengaluru is seeking a Lead Security Engineer to spearhead application and network security testing initiatives. The ideal candidate will lead a team, ensuring compliance with security standards and conducting thorough vulnerability assessments. This role requires at least 7 years of relevant experience along with certifications like OSCP or similar. For those looking to grow in a collaborative environment with competitive benefits, this is the opportunity for you.

Qualifications

• Must have 7+ years of experience in security testing.
• Certification such as OSCP, OSWA, PNPT, or similar required.
• Experience in manual testing and secure code review.
• Experience in secure code review (manual and automated).
• Proven team leadership experience.
• Excellent communication, presentation, and technical writing skills.

Responsibilities

• Conduct application and network security testing.
• Lead a security engineering team.
• Ensure compliance with security standards.
• Collaborate with clients to build secure architectures.

Skills

Application Security Testing

Web Application Penetration Testing

Network VAPT

Burp Suite Pro

Good programming skills

Team management

Programming skills

OWASP standards

Red teaming

Communication skills

Analytical skills

Education

BCA / B.Tech / B.Sc / M.Sc in Computer Science or Information Security

B.Sc Computer Science

B.Sc Information Security

Cyber Forensics

M.Sc Information Security

M.Sc Cyber Forensics

Tools

Burp Suite Pro

WebInspect

Acunetix

Active Directory testing tools

Job description

Lead Security Engineer

As a Lead Security Engineer, your role includes application and network security testing, security engineering activities, and tailored security solutions to address complex security testing and risk assessment needs.

Primary Responsibilities

• Application Security Testing (Web Application Penetration Testing, Mobile Application Penetration Testing, Network VAPT, Source Code Review, Wireless Pen‑Testing)
• Validation of secure application architecture and network architectures, vulnerability assessments, penetration tests, red teaming activities, ensuring compliance with information security standards
• Build and maintain efficient working relationships with clients
• Train, manage and guide a security engineering team

Requirements

• Education: BCA / B.Tech / B.Sc – Computer Science / B.Sc – Information Security / Cyber Forensics / M.Sc – Information Security / Cyber Forensics
• Certification: Must have any ONE of: OSCP, OSWA, PNPT, eJPT, eCPPTv2, CREST CPSA, CRT or other relevant certifications
• Minimum 7 years of relevant security testing experience in Web application penetration testing, Network VAPT, Active Directory penetration testing, Mobile application penetration testing (Android and iOS)
• Skilled in manual testing and using Burp Suite Pro, WebInspect, Acunetix
• Experience in secure code review (manual and automated)
• Experience handling a team
• Good programming skills in any language
• Proficient with OWASP security standards and common vulnerabilities
• Experience in red teaming activities
• Good communication skills, especially presentation and technical writing skills
• Excellent analytical and problem‑solving skills

Benefits

• Competitive salary and benefits
• Medical Insurance
• Parental Support – Maternity Leave & Paternity Leave
• Retirement Benefits – Gratuity & PF Contribution
• Opportunities for professional growth
• Collaborative and inclusive work environment

Seniority Level

Executive

Employment Type

Full-time

Job Function

Information Technology

Industries

IT Services and IT Consulting