Offensive Security Engineer

Foresee Security; Dadri; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Foresee Security, Noida (on-site), seeks an experienced VAPT Specialist to join our cybersecurity team. The role blends client-facing VAPT engagements with product security validation and research.

Responsibilities include planning and executing VAPT for web apps, APIs, mobile apps, networks and cloud; AI/LLM security testing; reporting with risk ratings and remediation; and retesting with client teams. 60% client work, 40% product security.

Qualifications

• 3–5 years of hands-on penetration testing experience.
• Experience delivering client VAPT engagements independently.
• Strong manual web app and API testing skills.
• Familiarity with OWASP Top 10 and CVSS.

Responsibilities

• Plan and execute VAPT for web apps, APIs, mobile apps, networks, and cloud.
• Perform AI/LLM security testing, including prompt injection and data leakage.
• Prepare comprehensive VAPT reports with risk ratings, PoCs, and remediation.
• Retest and validate remediation with client teams.
• Align security assessments with OWASP, RBI, SEBI, CERT-In, and ISO 27001.

Skills

Penetration testing

Web app testing

API testing

Manual testing

Client engagements

Burp Suite

Nmap

Nuclei

Cloud security assessment

Python scripting

Tools

Burp Suite Professional

Nmap

Metasploit

Nuclei

Amass

Shodan

Job description

Company: Foresee Security (NMT Security Innovations Pvt. Ltd.)

Location: Noida, India (On-site)

Experience: 3–5 Years

Employment Type: Full-time

Open Positions: 1

Joining: Immediate / Short Notice Preferred

Compensation: As per market standards

Certifications: CEH + One Hands-on Certification (Mandatory)

About Foresee Security

Foresee Security is an AI-powered cyber risk decision intelligence platform helping organizations identify, connect, and prioritize cybersecurity risks.

Our unified platform brings together External Exposure Intelligence, Third-Party Risk Intelligence, Continuous Compliance Intelligence, and AI Governance to help enterprises proactively manage cybersecurity risks and make smarter security decisions.

About the Role

We are looking for an experienced, hands-on VAPT Specialist to join our cybersecurity team.

This role combines client-facing penetration testing engagements with security research, vulnerability validation, and detection engineering for our External Attack Surface Intelligence platform.

The selected candidate will spend approximately 60% of their time on client VAPT engagements and 40% on product security validation and development.

Key Responsibilities

• Independently plan and execute VAPT engagements for web applications, APIs, mobile applications (Android/iOS), networks, and cloud environments.
• Perform AI/LLM application security testing, including prompt injection, jailbreaks, RAG data leakage, and agent/tool abuse.
• Identify and validate vulnerabilities such as IDOR, broken access control, authentication bypass, business logic flaws, and chained exploits.
• Conduct manual penetration testing beyond automated vulnerability scanning.
• Prepare comprehensive VAPT reports with risk ratings, proof of concept, business impact, and remediation recommendations.
• Conduct retesting and work with client teams to validate remediation.
• Support security assessments aligned with OWASP, RBI, SEBI, CERT-In, and ISO 27001 requirements.

2. External Attack Surface Intelligence (40%)

• Validate vulnerabilities and security exposures identified by the Foresee Security platform.
• Identify false positives and false negatives to improve detection accuracy.
• Perform attack surface discovery using Amass, Subfinder, httpx, Nuclei, Shodan, and Censys.
• Develop Nuclei templates, Python scripts, and automated vulnerability detection checks.
• Collaborate with engineering and product teams to improve the platform's security intelligence.

Required Technical Skills

• 3–5 years of hands-on penetration testing experience.
• At least 2 years of independently delivering client VAPT engagements.
• Strong manual web application and API penetration testing skills.
• Proficiency in Burp Suite Professional, Nmap, Metasploit, and Nuclei.
• Experience in network reconnaissance, DNS enumeration, service fingerprinting, and vulnerability validation.
• Practical knowledge of cloud security assessments (AWS, Azure, or GCP).
• Understanding of OWASP Top 10, OWASP API Security Top 10, OWASP MASVS, and CVSS.
• Working knowledge of Python or Bash scripting.
• Knowledge of AI/LLM security vulnerabilities and testing methodologies.
• Strong technical documentation, reporting, and client communication skills.

Mandatory Certifications

Candidates must hold both:

• Certified Ethical Hacker (CEH) – Mandatory
• At least one hands‑on certification: OSCP, OSWE, eWPTX, CRTP, or CPTS.

Applications without CEH certification will not be considered.

Good to Have

• Hands‑on LLM security testing using Garak, PyRIT, or Promptfoo.
• Experience working with EASM or vulnerability management platforms.
• Bug bounty achievements, CVE discoveries, or published security research.
• Mobile security testing using Frida, Objection, or MobSF.
• Experience with RBI, SEBI, or financial‑sector cybersecurity assessments.

Why Join Foresee Security?

• Work on an AI-powered cybersecurity product used for enterprise risk intelligence.
• Combine offensive security research with real‑world product development.
• Contribute to vulnerability detection and security automation capabilities.
• Collaborate directly with the founding, product, and engineering teams.
• Opportunity to grow into advanced offensive security and security research roles.

Hiring Process

• Initial profile and certification screening.
• Technical screening interview.
• Hands-on penetration testing assessment, including an AI/LLM security exercise.
• Final technical and founder interview.

Foresee Security

One Platform. Connected Risks. Smarter Decisions.