Red Team Specialist I

TalaKunchi Networks Pvt Ltd; Mumbai City; On-site; INR 800,000 - 1,200,000; Full time

Job summary

TalaKunchi Networks Pvt Ltd is seeking a highly skilled Application Security / Offensive Security Engineer with a Red Team mindset to join our team in Navi Mumbai. The role involves advanced penetration testing across Web, Mobile, and APIs, with emphasis on real-world exploitation and bypassing modern controls.

Responsibilities include developing custom scripts, performing red team assessments, and delivering detailed reports with remediation guidance.

Qualifications

• Hands-on Web, Mobile (Android/iOS) and API pentesting.
• Strong understanding of authentication, authorization and tokens.
• Reading and analyzing JavaScript and Python code.
• Experience with WAF evasion concepts and bypass techniques.
• Ability to produce detailed reproducible test reports.

Responsibilities

• Perform in-depth Web, Mobile, and API pentesting focusing on exploitation and chaining.
• Conduct Red Team–style app assessments across WAPT, MAPT, and API engagements.
• Develop scripts/tools to automate testing and bypass security controls.
• Research WAF evasion techniques and document remediation guidance.
• Reverse-engineer client-side and backend logic; identify business logic flaws.
• Deliver technical reports with reproduction steps and impact analysis.
• Stay updated on vulnerabilities and attack frameworks; collaborate with teams.

Skills

Web Penetration Testing

Mobile Penetration Testing

API Penetration Testing

OWASP Top 10

Python Scripting

JavaScript Debugging

Java Debugging

Threat Hunting mindset

Tools

Burp Suite

Frida

Objection

Postman

Mobile reversing tools

Job description

Location:

Navi Mumbai

Employment Type:

Full-Time

Experience:

36+ Years

About The Role

We are looking for a highly skilled Application Security / Offensive Security Engineer with a strong Red Team mindset to join our team. The role involves advanced penetration testing across Web, Mobile (Android & iOS), and APIs, focusing on real-world exploitation, vulnerability chaining, and bypassing modern security controls such as WAFs and client-side protections. If you thrive on deep technical challenges, scripting, and continuous research into emerging attack techniques, this role is for you.

Key Responsibilities

• Perform in-depth Web, Mobile, and API penetration testing with emphasis on exploitation and chaining vulnerabilities.
• Conduct Red Team-style application assessments across WAPT, MAPT, and API engagements.
• Develop custom scripts and tools to automate testing and bypass client-side security controls.
• Research and implement WAF evasion and bypass techniques.
• Reverse-engineer client-side and backend application logic.
• Identify business logic flaws and advanced attack paths.
• Deliver high-quality technical reports with reproduction steps, impact analysis, and remediation guidance.
• Stay updated with the latest vulnerabilities, attack techniques, and frameworks.
• Collaborate with development and security teams for secure design reviews and remediation.

Required Skills & Qualifications

• Strong hands-on experience in Web, Mobile (Android/iOS), and API Penetration Testing.
• Solid understanding of OWASP Top 10 (Web, Mobile, API).
• Experience with Java and JavaScript debugging.
• Ability to read, understand, and analyze JavaScript and Python code.
• Proficiency in Python (or equivalent scripting language) for automation and bypass tooling.
• Knowledge of modern web frameworks (React, Angular, Vue, Node.js, Spring Boot).
• Strong grasp of authentication, authorization, session management, and token-based security (OAuth, JWT, SAML).
• Familiarity with WAF technologies and bypass methodologies.
• Hands-on experience with Burp Suite, Frida, Objection, Postman, and mobile reversing tools.

Preferred Certifications

• OSCP eWPTX / eMAPT CRTP

Behavioural & Professional Attributes

• Strong research-driven and attacker mindset.
• Ability to work independently and lead complex security engagements.
• Excellent documentation and communication skills.
• Detail-oriented with a passion for deep technical problem-solving.
• Capability to mentor junior security testers.

Why Join Us

• Opportunity to work on cutting-edge offensive security projects.
• Exposure to advanced Red Team engagements.
• Collaborative environment with continuous learning and growth.