Cybersecurity Agent Developer at IT Clients · Bengaluru (Bangalore) · 7 - 14 years · ₹10L - ₹25L / yr · Posted 22 Jul 2025

Job Title: Cybersecurity Agent Developer
Location: Bengaluru, India
Experience: 7+ Years
Employment Type: Full-time
About the Role:
We are seeking a highly skilled Cybersecurity Agent Developer with deep expertise in C/C++ and Golang or Rust to build and optimize high-performance security agents for Windows, Linux, and macOS platforms. This role requires a strong background in low-level system programming, performance tuning, and security-centric design to ensure effective monitoring, threat detection, and system protection across diverse environments.
Key Responsibilities:
- Design, develop, and maintain cross-platform endpoint security agents.
- Optimize agent performance to ensure minimal system overhead and real-time responsiveness.
- Implement system-level hooks and monitoring components including:
- Process monitoring
- File system and network activity tracking
- System telemetry collection
- Work with kernel-level APIs and frameworks, such as:
- ETW, WFP, WMI, MiniFilter (Windows)
- eBPF, auditd, fanotify, netfilter (Linux)
- EndpointSecurity framework, XPC, System Extensions (macOS)
- Build robust, secure inter-process communication (IPC) and data serialization mechanisms.
- Integrate agents with cloud-based security platforms via REST APIs, gRPC, and TLS.
- Collaborate with internal teams (threat intelligence, detection, response) to evolve agent capabilities.
- Perform in-depth debugging, profiling, and optimization using industry-standard tools.
Required Skills & Experience:
Core Programming:
- Strong proficiency in C/C++ and either Golang or Rust
- Solid experience in multi-threaded and asynchronous programming
Platform Expertise:
- Proven experience developing for Windows, Linux, and macOS
- Deep knowledge of system-level programming, including:
- Windows: WinAPI, ETW, WFP, WMI, MiniFilter
- Linux: eBPF, auditd, fanotify, netfilter
- macOS: EndpointSecurity framework, XPC, System Extensions
Security & Networking:
- Understanding of secure IPC, TLS, gRPC, and secure coding practices
- Familiarity with system hardening and secure memory management
Debugging & Optimization Tools:
- Proficient in using tools like GDB, LLDB, Valgrind, Perf, Wireshark, Sysinternals Suite
Version Control:
- Strong experience with Git (GitHub, GitLab)
Preferred Qualifications:
- Experience with cybersecurity frameworks like MITRE ATT&CK, Sysmon, YARA, Suricata
- Hands-on exposure to kernel/driver development
- Familiarity with EDR/XDR, sandboxing, and SIEM integrations
- Understanding of malware analysis and threat detection techniques
- Exposure to container security and cloud-native security agent development

Similar jobs (10)
Cybersecurity Engineer – AI Training Project
About the Opportunity
We’re looking for experienced Cybersecurity Engineers to contribute technical expertise to a customer project focused on improving the capabilities of next-generation AI systems.
In this role, you’ll use your real-world experience in cybersecurity, software engineering, vulnerability assessment, and secure development to create high-quality technical inputs that help AI systems better understand, debug, secure, and reason about complex software.
What You’ll Do
- Analyze, debug, and resolve software bugs, vulnerabilities, and security issues across complex codebases.
- Review source code and identify potential security weaknesses, vulnerabilities, and attack vectors.
- Perform security assessments, vulnerability assessments, penetration testing, and codebase audits.
- Develop and modify software using languages such as Python, Java, Rust, Go, C++, or TypeScript.
- Implement new features and fix existing functionality while maintaining strong security and engineering standards.
- Refactor legacy code to improve security, maintainability, reliability, and performance.
- Work on backend systems and help optimize applications for scalability, performance, and security.
- Analyze real-world security scenarios and translate your expertise into high-quality technical examples and problem-solving tasks.
- Document technical findings, vulnerabilities, debugging approaches, and recommended solutions.
- Provide domain expertise that helps improve how AI systems reason about software engineering and cybersecurity problems.
What We’re Looking For
- Strong professional experience in Cybersecurity / Application Security / Product Security / DevSecOps / Penetration Testing / Vulnerability Management.
- Strong programming experience in one or more of:
- Python
- Java
- Rust
- Go
- C++
- TypeScript
- Proven experience with debugging, troubleshooting, and fixing complex software issues.
- Hands-on experience with penetration testing, vulnerability assessment, security auditing, or application security.
- Understanding of secure software development practices and modern security threats.
- Strong knowledge of data structures, algorithms, software architecture, and code quality.
- Ability to review unfamiliar codebases and quickly understand how systems work.
- Strong written communication and the ability to explain complex technical findings clearly.
Nice to Have
- Experience with OWASP, API security, cloud security, DevSecOps, or threat modeling.
- Experience performing security assessments on production applications or enterprise systems.
- Experience with tools such as Burp Suite, Metasploit, Nmap, Wireshark, SAST/DAST tools, or vulnerability scanners.
- Contributions to open-source security or software projects.
- Experience working with AI/ML systems, LLMs, data annotation, or AI training projects.
- Relevant security certifications such as OSCP, OSWE, CEH, CISSP, Security+, or equivalent practical experience.
Engagement
- Role: Cybersecurity Engineer
- Work: Remote(Contract)
- Experience: Mid-level to Senior
- Programming: Required
- Cybersecurity expertise: Required
Why Join?
This is an opportunity to apply your existing cybersecurity expertise to an emerging area of technology. Your practical experience debugging software, identifying vulnerabilities, securing applications, and solving complex engineering problems will directly contribute to improving the capabilities of next-generation AI systems.
If you enjoy breaking down complex technical problems, finding vulnerabilities, fixing software, and thinking deeply about how systems work, this project could be a strong fit.
Location: Pune/Bengaluru
As a Senior Software Engineer, you will tackle a highly challenging role within our Cyber Security Engineering integration development team. You will be responsible for the End-to-End (E2E) delivery of projects from gathering customer requirements to deploying high-performance data exchange solutions on-prem or in the cloud. We are looking for a Systems-Level Thinker who can seamlessly transition between building complex integrations and architecting high-throughput, low-latency backends. Because each integration may require a different technical approach, we value engineers who love reskilling, following agile best practices, and maintaining an evolving mindset.
Core Responsibilities
Technical Leadership and Architecture
● Systems Engineering: Design, build, and optimize high-throughput, low-latency backend systems and data-exchange layers.
● Architecture and Integration: Participate in planning, defining, and exploring solution alternatives. Architect and estimate deep technical custom solutions and integrations across diverse enterprise tech stacks. ● Stream Processing: Implement event-driven architectures, manage backpressure, and handle real-time state management across security platforms.
● Delivery Ownership: Own projects end-to-end, defining and implementing enablers to evolve solution intent directly alongside our Agile teams.
Team Leadership and Quality
● Mentorship: Actively lead, coach, and mentor junior developers, providing technical guidance to foster professional development.
● Engineering Excellence: Oversee code reviews, build robust CI/CD pipelines, enforce strict quality checks, and ensure rigorous adherence to coding standards.
● Agile Execution: Actively participate in Agile development, including writing, breaking down, and estimating User Stories.
Customer and Stakeholder Collaboration
● Customer Delight: Maintain a strong customer-first attitude while designing, building, and deploying products.
● Technical Communication: Articulate complex technical trade-offs clearly to both business stakeholders and engineering teams.
● Pipeline Management: Manage customer relationships effectively to ensure a continuous flow of project scope, maintaining clear team backlogs.
Job Requirements
● Experience: 5+ years of proven software engineering experience, with a track record of leading small engineering teams or mentoring junior devs.
● High-Throughput Backend Focus: 5+ years of experience engineering robust, real-time backends specifically using Go (Golang) or Java.
● Polyglot and Integration Capability: Deep expertise in at least one or two additional languages/frameworks from our ecosystem: Python, TypeScript, Node.js, React.js, Angular, C#, or C++.
● Computer Science Fundamentals: Excellent knowledge of complex Data Structures, algorithms, and their correct situational usage.
● Adaptability: A passionate programmer who is genuinely open and excited to learn new software development skills as required by changing project demands.
Bonus / Added Advantages
● AI & Intelligent Automation: Hands-on knowledge of AI concepts, Large Language Models (LLMs), and experience building or integrating AI agents to automate complex workflows or security processes.
● Cybersecurity Domain: Experience in the cybersecurity space (SIEM, SOAR, or platform security).
● Modern Web Tech: Strong experience in developing software using modern web technologies.
● E2E Lifecycle: Proven background handling a project completely from discovery to cloud/on-prem deployment.
● Open Source: Active contributions to the Open Source community. (Please share your GitHub/GitLab links in your application!)
About the team
SecurITe’s mission is to build an Agentic‑AI driven security platform that protects critical infrastructure from modern cyber threats. Our focus is on delivering highly performant, resilient, and intelligent network security systems that help defenders stay ahead of adversaries.
About the Role
We’re looking for a Senior Golang Engineer to spearhead the development of our next-generation cybersecurity AI platform. In this role, you will build and scale robust backend systems to solve complex, high-impact technical challenges.
Why This Role Matters
Cybersecurity is undergoing a fundamental shift. AI is no longer an enhancement—it’s becoming the core engine of how detection, investigation, and response are executed. As our Golang Engineer, you will architect and build the backend systems that make this transformation real. Your work will influence not only the evolution of our platform, but also how an entire industry adapts to and leverages AI‑driven security. This is a chance to solve novel technical challenges while shaping how defenders outpace modern attackers.
What You’ll Do
● Design and develop scalable backend services and REST APIs using Golang.
● Architect and maintain microservices-based systems.
● Perform rigorous debugging and system performance optimization.
● Integrate services with Opensearch, Elasticsearch, and Sumo APIs.
● Manage and optimize data interactions with SQL databases.
Impact You’ll Have
● Build the foundational infrastructure that enables real-time AI-driven threat detection.
● Ensure the reliability and performance of critical security systems under high-load scenarios.
● Directly contribute to the resilience of global critical infrastructure by shipping secure and efficient code.
Required Experience
● 4-8+ years of experience in Golang and REST APIs
● Extensive experience in professional backend software development.
● Proven track record of designing and deploying distributed systems at scale.
● Demonstrated experience optimizing performance for data-intensive applications.
● Proven experience leading or architecting large-scale distributed systems and driving technical strategy.
Required Skills & Qualifications
● Expertise in Golang development.
● Deep experience building Backend/REST APIs.
● Proficiency in Python.
● Strong understanding of Microservice architecture.
● Experience with SQL databases.
● Experience with Opensearch, Elasticsearch, or Sumo APIs.
● Strong capabilities in debugging and performance optimization.
Nice to Have
● Knowledge of Identity, Authentication, and Authorization protocols (OAuth, SAML, JWT).
● Experience working in Linux environments.
The Mindset
● Problem Solver: You thrive on complex, ambiguous challenges and engineer elegant solutions.
● Ownership‑Driven: You take initiative, move fast, and deliver outcomes without hand‑holding.
● Continuous Learner: You stay ahead of the curve in AI, ML, and emerging technologies.
● Startup DNA: You excel in fast‑moving environments where priorities evolve and impact is immediate.
Job Title: Chief Agentic Systems Architect
Location: Remote
Type: Contract
ROLE OVERVIEW
We are hiring a Chief Agentic Systems Architect to transform a 10+ year legacy codebase into a high‑velocity, agent‑operable architecture. This role sits at the intersection of software architecture, AI‑agent orchestration, and engineering governance. You will design system patterns, MCP interfaces, and cognitive context layers that allow LLMs and autonomous agents to safely refactor, test, and ship production code with minimal human intervention.
WHAT YOU’LL DO
1. AGENT‑OPERABLE SYSTEM ARCHITECTURE
- Decompose legacy monoliths into agent‑readable, modular systems with strict boundaries and single responsibility
- Lead incremental modernization using the Strangler Pattern, wrapping legacy logic in modern, contract‑driven interfaces
- Enforce SOLID principles, Dependency Injection, and Hexagonal Architecture to ensure deterministic AI execution and low regression risk
2. AGENTIC FRAMEWORK & MCP LEADERSHIP
- Architect and maintain the agent context layer: standardized Skills, Rules, and Commands for AI‑driven engineering workflows
- Build and operate Model Context Protocol (MCP) servers exposing legacy APIs, services, and databases as typed, secure, AI‑consumable tools
- Own contract‑first API design as the primary interface between human intent and autonomous agent execution
3. ENGINEERING GOVERNANCE & AI QUALITY CONTROL
- Act as architectural gatekeeper for AI‑generated pull requests, ensuring scalability, security, and long‑term maintainability
- Mandate test‑driven development (TDD) and characterization testing to preserve legacy behavior during refactoring
- Monitor and optimize agentic reasoning loops to balance cost, speed, and architectural integrity
WHAT WE’RE LOOKING FOR
- 6+ years in software architecture, platform engineering, or technical leadership
- Proven experience modernizing large, undocumented legacy systems
- Deep hands‑on expertise with TypeScript, .NET, and Node.js
- Strong background in API design, distributed systems, and modular architectures
- Practical experience with agentic development, MCP, LLM tooling, or AI‑assisted engineering
- Bias toward clean code, deterministic systems, and production‑grade AI
NICE TO HAVE
- Experience with remote‑first or globally distributed teams
- Background in SaaS transformations, scale‑ups, or private equity-backed environments
- Comfort operating in high‑ambiguity, high‑ownership settings
About us
MyRico builds personal AI agents for enterprise, the copilots and digital employees that make humans more productive. The MyRico agents sit at the intersection of enterprise memory, high-end security, and an ever-expanding set of capabilities. We're a small team shipping fast, and the product is live with real customers today.
The role
Full-time · Bangalore
You'll own the systems that make an autonomous agent trustworthy in production. This is not just prompt engineering, and it's not model training - it's that and all the engineering layers in between: model steering, memory architecture, orchestration design, latency optimization, deterministic vs non-deterministic systems tradeoff, deployment, and operator tooling.
Concretely, the kind of work you'd have done here last week would include enhancing agent memory systems, runtime and scheduling reliability and predictability, adding new capability and tools to deployed agents, operator tools, live system debugging and benchmarking various models for price, latency and quality. And that is just last week. We are a small nimble startup rapidly working to address customer needs in this growing space, so things change rapidly.
What we're looking for
- More than 7 years of software engineering, with real production ownership of distributed or stateful systems - you've been paged for something you built and made it not happen again.
- Strong understanding of LLM based native app building, combining classic and model driven applications to get the best of both. You've built on LLMs beyond demos: agent frameworks, tool use, context management, eval fixtures, and you know why "it worked in the transcript" isn't evidence.
- Python and shell in production settings; comfortable in TypeScript/Node. You write boring, testable code and prefer the standard library to a new dependency.
- Systems taste: append-only logs, idempotent reconciliation, fold-the-events state machines, and read-only debugging surfaces feel like home.
- Evidence discipline: tests before features, claims backed by quoted observations, decisions written down.
Nice to have
- Experience running the combination of multi-tenant and single-tenant / on-prem-style fleets with ability to handle per-customer isolation, upgrade paths, migration compatibility in both setups.
- Security instincts for products that touch highly sensitive data and systems, including things like executives' email, calendars, and messages: least privilege, loopback-only services, secrets that never hit a log.
- You already orchestrate AI coding agents in your own workflow and have opinions about where they break.
How we work
Small team, high trust, written decisions. Designs get adversarial review before code; PRs get automated review driven to zero open findings; features aren't done until verified on a live system. AI agents do a large share of the implementation, your leverage is judgment: framing the problem, freezing the right design, and knowing when the machine is wrong.
At BigThinkCode, we build innovative technology solutions that solve complex enterprise challenges. We are looking for a highly skilled Go/Golang Engineer who thrives in building low-latency, distributed systems and enjoys working on security sensitive platforms.
This role offers the opportunity to work on cutting-edge SaaS platforms, building scalable backend systems that operate in demanding environments requiring high reliability, security, and performance.
Please find below our job description, if interested apply / reply sharing your profile to connect and discuss.
Company: BigThinkCode Technologies
URL: https://www.bigthinkcode.com/
Experience required: 3-6 years
Work location: Chennai
Joining time: Immediate – 4 weeks
Work Mode: Work from office / Hybrid
Must have skills:
- Hands on expertise in Go / Golang, low-latency routing, distributed systems.
- Experience designing and troubleshooting low-latency applications.
- Experience in enterprise software deploy / developing SaaS application is a plus
- Event drive architecture (EDA) microservices project experience is a plus.
- Additional programming knowledge: Typescript or NodeJS or Python
- Hands on experience using docket containers and Kubernetes.
- Aware about Observability, Asynchronous and Loose Coupling.
- Familiar with deep knowledge on infrastructure and customer application deployment
- Work with message brokers and streaming technologies such as Kafka, or similar event-driven platforms.
A skilled Go/Golang Developer with 3–6 years of experience in building scalable applications using event-driven architecture within distributed systems. The ideal candidate should be comfortable in low level programming, high-performance backend services and have a strong understanding of Observability, asynchronous programming patterns.
Experience or exposure to knowledge embedding and vectorization techniques is a strong plus, especially in the context of modern data-driven or AI-powered systems.
Required Skills
- 4+ years of hands-on experience with Go / Golang
- Strong engineer with security-sensitive, correctness-critical code paths
- Engineer worked on SAAS / On-prem environment
- Experience with containerization tools like Docker and orchestration tools like Kubernetes
Ideal Candidate
We are looking for engineers who:
- Have strong ownership mindset and platform thinking.
- Can balance correctness, performance, and simplicity under pressure.
- Are comfortable making architectural decisions in distributed environments.
- Use AI-assisted development tools effectively while maintaining engineering judgment.
- Can distinguish robust production-grade solutions from generated boilerplate code.
- Have experience supporting SaaS, hybrid-cloud, or on-premise deployments.
Why Join Us:
- Collaborative work environment.
- Exposure to modern tools and scalable application architectures.
- Medical cover for employee and eligible dependents.
- Tax beneficial salary structure.
- Comprehensive leave policy
- Competency development training programs.
Job Title: AppSec / AI Security Engineer
Employment Type: Full-time/ Permanent
Location: Indore (Work from Office)
About the Role
We're embedding security and AI governance into the core of our software development lifecycle. This role owns the design and implementation of automated security scanning, code provenance, and governance processes to ensure AI-generated code meets the highest security and compliance standards.
If you're a self-driven engineer who enjoys building security automation from the ground up and weaving security seamlessly into development pipelines, this role is for you.
Key Responsibilities
- Build and integrate security controls into CI/CD pipelines — including automated scanning for source code, dependencies, secrets, and Infrastructure as Code (IaC) — with enforcement gates on every merge.
- Design and implement code provenance tracking to capture AI-generated code, the AI models used, and reviewer approvals as part of the development pipeline.
- Develop structured code review workflows incorporating specifications, scan results, and code provenance.
- Optimize security scanning tools to reduce false positives and drive developer adoption.
- Investigate and manage security findings using established remediation and documentation processes.
- Contribute to AI governance standards, including secure usage of AI tools and governance of AI-generated code.
- Conduct independent security reviews of internally developed, third-party, and vendor-supplied code to ensure compliance with security standards.
Required Skills & Experience
- Strong hands-on experience in Application Security, with proven expertise securing CI/CD pipelines.
- Experience implementing automated security scanning and enforcement — not just operating existing tools.
- Strong knowledge of SAST, SCA, secret scanning, DAST, and IaC security scanning.
- Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure, is preferred.
- Ability to design, build, and own security automation and governance solutions from the ground up.
- Strong judgment in balancing security with developer productivity by minimizing unnecessary alerts.
- Excellent communication skills, with the ability to explain security risks in clear, business-friendly language.
- Strong analytical mindset and ability to independently assess security risk across internal and external codebases.
Preferred Qualifications
- ~4+ years of experience in Application Security, Security Engineering, DevSecOps, or a related field.
- Experience with AI-generated code security, LLM security risks, prompt injection, code provenance, or AI governance.
- Hands-on experience with tools such as Semgrep, CodeQL, Snyk, Gitleaks, TruffleHog, Prowler, Trivy, or similar.
- AWS certification (Solutions Architect Associate preferred), or willingness to obtain one within 90 days.
- Security certifications such as OSCP, GWAPT, CSSLP, or equivalent.
- Experience writing custom detection rules or security policies (e.g., custom Semgrep rules).
About Company:
Five Exceptions Software Solutions Private Limited is an offshore software development company run by a 15+ year experience team. We are a software development team with extensive experience in developing amazing products, websites, and mobile apps. The company has expertise in different technology spectrums. We provide a better work environment to grow technically and professionally.
For more info, please visit our website: https://5exceptions.com
About StrideOne:
StrideOne is a unified tech-enabled financial platform and NBFC focused on enabling MSMEs and SMEs through structured credit solutions, receivables financing, and receivables management. We are designed to simplify access to capital, improve cash flow visibility, and support risk-aware financial decision-making for growing businesses across industries. With a steadily growing disbursement footprint, an expanding anchor network, and established partnerships with multiple lending institutions, StrideOne is entering its next phase of growth. The organisation is building a financial ecosystem that combines lending, receivables management, and data-driven workflows, positioning itself to scale sustainably while maintaining strong governance, portfolio quality, and operational discipline.
Key Responsibilities:
Architect & Design: Design and implement highly scalable, available, and secure web applications. You’ll be responsible for designing multi-tenant architectures, ensuring data isolation, and leveraging modern cloud infrastructure to ensure the platform scales efficiently.
Security Focused Development: Develop and enforce secure coding standards and best practices for cloud-based applications and APIs. Conduct regular code reviews with a focus on security vulnerabilities.
API & Microservices Design: Design and implement secure, scalable, and maintainable APIs and microservices that integrate seamlessly with the platform. Ensure the use of best practices for service discovery, communication, and fault tolerance.
Performance Optimization: Identify and resolve performance bottlenecks in the application and infrastructure, ensuring scalability and responsiveness under varying load conditions.
Compliance & Regulatory Requirements: Ensure that applications comply with industry standards and regulations (e.g., GDPR, HIPAA, SOC 2, ISO 27001). Assist with audits and security certifications.
Collaboration & Leadership: Work closely with product managers, QA engineers, and other stakeholders to define and implement new features and improvements. Collaborate with the infrastructure team to ensure seamless deployment and scaling of the application. Also mentor and guide junior engineers on secure coding practices and development techniques.
Security Automation & Monitoring: Implement logging, monitoring, and alerting systems to continuously assess the security posture of the application. Stay up to date with the latest security trends, vulnerabilities, and best practices. Promote security awareness and training within the engineering team.
Qualifications:
Experience: 2+ years of experience in software engineering, with a focus on developing secure and scalable multi-tenant web applications with customer data isolation and tenant-specific configurations.
Tech Stack: Proficiency in modern web technologies (Python is a plus), relational databases, and cloud platforms (AWS, Azure, GCP).
Microservices Architecture: Strong experience designing and developing microservices-based architectures. Familiarity with service discovery, API Gateway, inter-service communication, and distributed systems principles.
Scalability & Performance: Experience with designing highly scalable and performant systems. Knowledge of caching, database sharding, partitioning, and high-throughput systems.
Security Expertise: Understanding of cloud security principles, cryptography, identity and access management (IAM), and secure coding practices.
Analytical Skills: Strong problem-solving skills with the ability to analyze complex security issues and provide practical solutions.
Soft Skills: Strong communication skills with the ability to explain complex technical concepts to non-technical stakeholders. Experience working in agile, collaborative environments.
We are looking for an experienced Developer with experience in compiled languages and ready to work in Golang. You will be responsible for the Development of distributed services GUI and terminal application in Golang. Candidates should have strong understanding of Algorithms, Memory Management and Networking
Required Experience & Skills:
- C/C++/C#/Go/Rust.
- Networking, Database, Linux, Docker.
- Multiprocessing, Multithreading, Distributed computing, Thread synchronization techniques.
- Algorithms and data structures.
- Communication protocols, gRPC, MQTT, REST, Modbus, OPC...
- GUI Programming
- Testing, Debugging and performance optimization.
- REST APIs, MySQL, Redis
- Proficiency with Git for version control and collaborative development workflows.
A BIT ABOUT US
Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.
The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.
Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.
We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.
The Opportunity
To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.
What An Ideal Candidate Would Look Like:
- Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
- Technology Stack: AWS, GCP, Objective C, Java, Python
- Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities
Minimum Requirements
- 2-4+ years of experience in application security and vulnerability research
- Strong foundation in mobile app security - Android or Ios
- Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
- Strong understanding of exploit mitigations and proven ability to bypass them
- Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
- Develop AI-driven agents to automate dynamic analysis
- Should be able to Leverage AI/LLMs to augment Pentesting efforts
- Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables
Good to have Requirements
- Understanding of AI/ML security risks
Responsibilities
- Security assessment of web/mobile applications on various platforms
- Focusing on Mobile Application Security Research for new vulnerabilities
- Static and Dynamic Code Analysis
- Develop and interpret security standards and guides
- Automation of exploit development
- Understand and explain the results with impact on business and compliance status
- Continuously learning and training on latest tools and technique
Work Expectations
Within 1 month
Training on processes, security workflows and develop understanding on internal tools.
Within 3 months
Actively contributing in exploit development and automation of it with the team.
Within 6 months
Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.
Within 1 Year
By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.
Personality traits we really admire
- A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
- Great attitude to ask questions, learn and suggest process improvements.
- Has attention to details and helps identify edge cases.
- Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
- Follow timelines and absolute commitment to deadlines.
Interview Process - would be team specific
- Round 1- CTF round
- Round 2 -Profile Evaluation; HR
- Round 3 -Technical Interview with security team members
- Round 4 -Technical Interview with the Hiring Manager
- Round 5 -Technical round with CTO
- Round 6 -HR Round
Compensation
- As per Industry Standards
Why Join Us
- Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
- Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
- Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
- Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.















