Security Engineer Intern

Srmap; Bengaluru; On-site; INR 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive stipend

Certificate and Letter of Reference

Friendly leave policy

Fam merchandise

Job summary

Srmap in Bengaluru seeks a security engineer to perform vulnerability assessments on Web apps, mobile apps, and APIs, and to integrate SAST/DAST into CI/CD pipelines. You will review code for security flaws and help developers write secure code, while prioritizing bug reports from bug bounty programs.

You will collaborate with product and engineering teams during design phases to identify potential risks, and stay updated with CVEs, zero-days, and security trends to keep systems secure.

Qualifications

• Deep understanding of OWASP Top 10 vulnerabilities and patching approaches.
• Ability to read code in Python/Go/Java/JavaScript and write scripts to automate attacks or defenses.
• Active participation in CTFs, Bug Bounties, or platforms like Hack The Box.

Responsibilities

• Perform vulnerability assessments and penetration testing on Web Applications, Android/iOS Apps, and APIs.
• Integrate security tools into CI/CD pipelines to automate security checks.
• Review source code for security flaws and assist developers in writing secure code.
• Analyze and prioritize bug reports from Bug Bounty programs.
• Collaborate with product and engineering teams during design phases to identify risks.
• Stay updated with CVEs, zero-days, and security trends.

Skills

OWASP Top 10 knowledge

Code reading Python/Go/Java/JS

Bug bounty/CTF participation

Tools

Burp Suite

Metasploit

Nmap

Postman

Job description

Your Role

Here’s what you will be doing:

• Perform vulnerability assessments and penetration testing (VAPT) on Web Applications, Android/iOS Apps, and APIs.
• Integrate security tools (SAST/DAST) into CI/CD pipelines to automate security checks.
• Review source code for security flaws such as SQL injection, XSS, and IDOR, and assist developers in writing secure code.
• Analyze and prioritize bug reports from Bug Bounty programs.
• Collaborate with product and engineering teams during design phases to identify potential security risks.
• Stay updated with the latest CVEs, zero-days, and security trends.

About You

The company is looking for:

• Deep understanding of OWASP Top 10 (Web & Mobile) vulnerabilities and how to exploit and patch them.
• Hands-on experience with security tools like Burp Suite, Metasploit, Nmap, Postman, or similar.
• Ability to read code in Python, Go, Java, or JavaScript and write scripts to automate attacks or defenses.
• Active participation in CTFs, Bug Bounties, or ranking on platforms like HackTheBox or TryHackMe.
• Strong communication skills to explain complex vulnerabilities clearly to developers.

Compensation & Benefits

• Competitive stipend.
• Certificate and Letter of Recommendation.
• Friendly leave policy.
• Fam merchandise.

Career Progression

• Work directly with founding members and senior engineers experienced in building systems at scale.