JobCubby JobCubby
Sign up
Z

Security Engineer — Offensive Security

ZeroRisk Labs Guwahati, Assam, India · ₹400K–₹600K/yr

Sep 04
security Junior (0-2 yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves performing penetration testing, vulnerability assessments, and security reviews across web applications, APIs, and infrastructure. You will also develop proofs of concept, automate security testing, and collaborate with engineering teams to remediate identified vulnerabilities.

What they look for

Penetration testing Vulnerability research Exploitation Security testing Proof-of-concept development Web application security API security Network security Cloud security Reconnaissance Attack-surface analysis Red teaming Adversary simulation Source-code review Automation scripting Vulnerability assessment

Requirements

The ideal candidate is a curious engineer who focuses on practical exploitation and impact analysis rather than just scanner results. While certifications are valued, the role prioritizes strong technical ability and hands-on experience in offensive security methodologies.

Full description

We are looking for a Security Engineer – Offensive Security who is passionate about breaking things, understanding how they can be exploited, and helping build stronger security defenses.

You will work on real-world security assessments across web applications, APIs, networks, cloud environments, and infrastructure. The role involves hands-on penetration testing, vulnerability research, exploitation, security testing, and developing practical proof-of-concepts.

We value technical ability and curiosity over certifications alone.

Responsibilities

  • Perform penetration testing of web applications, APIs, networks, and infrastructure.
  • Identify, validate, and exploit security vulnerabilities.
  • Conduct vulnerability assessments and security reviews.
  • Develop Proofs of Concept (PoCs) for identified vulnerabilities.
  • Perform security testing against authentication, authorization, business logic, and API functionality.
  • Conduct reconnaissance and attack-surface analysis.
  • Assist with Red Teaming and adversary simulation activities.
  • Perform source-code and application security reviews where required.
  • Develop scripts and tools to automate security testing and research.
  • Prepare detailed technical reports with impact, evidence, and remediation recommendations.
  • Work closely with engineering teams to reproduce and remediate security issues.
  • Continuously research emerging vulnerabilities, attack techniques, and offensive-security methodologies.

What We Look For

We are looking for people who don't stop at:

“The scanner found a vulnerability.”

We want engineers who ask:

“How can this actually be exploited, what is the real impact, and how can we prove it?”

If you enjoy breaking applications, investigating attack paths, building PoCs, researching vulnerabilities, and thinking like an attacker, we'd love to hear from you.

Compensation

Exceptional candidates with strong practical experience may be considered outside this range. Freshers are welcomed.

Similar roles