OSCP certified AND Penetration tester

Job Overview

We are looking for an experienced Cyber Security professional with 5+ years of hands-on experience in VAPT, security assessments, cloud security, Active Directory security, and compliance. The candidate will be responsible for conducting security assessments, identifying risks, ensuring compliance with security standards, and providing remediation guidance to clients.

Key Responsibilities

• Conduct Web Application, API, Network, Infrastructure, and Mobile Application VAPT.
• Perform internal and external penetration testing and Active Directory security assessments.
• Identify, validate, and document security vulnerabilities with remediation recommendations.
• Conduct Cloud Security assessments across AWS, Azure, and GCP environments.
• Perform security audits, risk assessments, and compliance gap assessments.
• Assist clients in implementing security controls and meeting compliance requirements.
• Prepare detailed technical reports and executive-level security assessment reports.
• Lead security assessments and coordinate with clients and internal teams.
• Review security configurations, architecture, and technical controls.
• Provide guidance and mentorship to junior security engineers.

Technical Requirements

• 5+ years of hands-on experience in Cyber Security, VAPT, and Security Assessments.
• Strong understanding of OWASP Top 10, API Security, and common attack methodologies.
• Expertise in Active Directory security, privilege escalation, and internal network penetration testing.
• Strong knowledge of Linux, Windows, Networking, and security technologies.
• Experience with Cloud Security assessments (AWS/Azure/GCP).
• Familiarity with tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, and Kali Linux.
• Strong vulnerability analysis, exploitation, and remediation skills.

Compliance & Security Frameworks

• Knowledge and experience with ISO 27001/27002.
• Understanding of SOC 2 requirements and security controls.
• Familiarity with PCI DSS, NIST Cybersecurity Framework, and CIS Benchmarks.
• Experience in security audits, compliance assessments, risk management, and control validation.
• Ability to assist in compliance documentation, evidence collection, and remediation tracking.
• Knowledge of GDPR and other relevant security and privacy regulations is an advantage.

Preferred Certifications

• OSCP / OSCP+
• CEH / CEH Master
• CISSP
• CISA / CISM
• ISO 27001 Lead Auditor / Lead Implementer
• CREST or other relevant security certifications

Candidate Expectations

• Strong analytical, problem-solving, and communication skills.
• Ability to independently manage security assessments and client engagements.
• Experience in technical report writing and presenting security findings.
• Ability to work with cross-functional teams and provide actionable security recommendations.
• Demonstrated practical knowledge through real-world projects and assessments.

A BIT ABOUT US

Appknox is one of the top Mobile Application security companies recognized by Gartner and G2. A profitable B2B SaaS startup headquartered in Singapore & working from Bengaluru.

The primary goal of Appknox is to help businesses and mobile developers secure their mobile applications with a focus on delivery speed and high-quality security audits.

Appknox has helped secure mobile apps at Fortune 500 companies with major brands spread across regions like India, South-East Asia, Middle-East, US, and expanding rapidly. We have secured 300+ Enterprises globally.

We are a 65+ incredibly passionate team working to make an impact and helping some of the biggest companies globally. We work in a highly collaborative, very fast-paced work environment. If you have what it takes to be part of the team, we are excited and let’s speak further.

The Opportunity

To join the security team engaging with multiple clients, helping them with end to end security audits, also research about new topics and vulnerabilities to be added to the scanner, present it in conferences.

What An Ideal Candidate Would Look Like: 

• Skills - Application Penetration Testing (Web, iOS and Android), experience with IoT testing, source code audits.
• Technology Stack: AWS, GCP, Objective C, Java, Python
• Responsibilities: Engage with clients for scoping call, perform security audits, remediation call with clients to patch the issues, research on new technologies/vulnerabilities

Minimum Requirements

• 2-4+ years of experience in application security and vulnerability research
• Strong foundation in mobile app security - Android or Ios
• Proven track record of discovering and disclosing CVEs in mobile platforms or popular applications (provide - github/bug bounty profiles)
• Strong understanding of exploit mitigations and proven ability to bypass them
• Should be able to architect automated detection logic for new vulnerabilities and integrate them into our security products
• Develop AI-driven agents to automate dynamic analysis
• Should be able to Leverage AI/LLMs to augment Pentesting efforts
• Ability to work independently in a fast-paced environment, balancing deep research with practical deliverables

Good to have Requirements

• Understanding of AI/ML security risks

Responsibilities

• Security assessment of web/mobile applications on various platforms
• Focusing on Mobile Application Security Research for new vulnerabilities
• Static and Dynamic Code Analysis
• Develop and interpret security standards and guides
• Automation of exploit development 
• Understand and explain the results with impact on business and compliance status
• Continuously learning and training on latest tools and technique

Work Expectations

Within 1 month

Training on processes, security workflows and develop understanding on internal tools.

Within 3 months

Actively contributing in exploit development and automation of it with the team.

Within 6 months

Expected to achieve Subject Matter Expert status on our core security products. We expect you to validate your findings against real-world conditions, with a strong emphasis on translating internal discoveries into actionable bug bounty submissions and earned CVEs to benchmark your impact against the external security community.

Within 1 Year

By the end of your first year, you will be expected to produce and submit a piece of novel, peer-reviewed security research. This deliverable must be of a quality suitable for top-tier industry conferences.

Personality traits we really admire

• A confident and dynamic working persona, which can bring fun to the team, and a sense of humour, is an added advantage.
• Great attitude to ask questions, learn and suggest process improvements.
• Has attention to details and helps identify edge cases.
• Highly motivated and coming up with fresh ideas and perspectives to help us move towards our goals faster.
• Follow timelines and absolute commitment to deadlines.

Interview Process - would be team specific

• Round 1- CTF round 
• Round 2 -Profile Evaluation; HR
• Round 3 -Technical Interview with security team members
• Round 4 -Technical Interview with the Hiring Manager
• Round 5 -Technical round with CTO
• Round 6 -HR Round

Compensation

• As per Industry Standards

Why Join Us

• Freedom & Responsibility: If you are a person who enjoys challenging work & pushing your boundaries, then this is the right place for you. We appreciate new ideas & ownership as well as flexibility with working hours.
• Great Salary & Equity: We keep up with the market standards & provide pay packages considering updated standards. Also as Appknox continues to grow, you’ll have a great opportunity to earn more & grow with us. Moreover, we also provide equity options for our top performers.
• Holistic Growth: We foster a culture of continuous learning and take a much more holistic approach to train and develop our assets: the employees. We shall also support you all on that journey of yours.
• Transparency: Being a part of a start-up is an amazing experience, one of the reasons being open communication & transparency at multiple levels. Working with Appknox will give you the opportunity to experience it all first-hand.

You will lead Application Security and VAPT initiatives and own the full security testing lifecycle. You’ll also help the company’s applications meet the strict security standards required for defence industry certifications.

What You’ll Do

• Run end-to-end VAPT on web apps, APIs, and cloud environments, finding logic flaws, access control issues, and OWASP Top 10 vulnerabilities
• Set up and manage Semgrep in the CI/CD pipeline for static analysis, taint tracking, and secure code reviews
• Run automated and manual DAST scans with OWASP ZAP to simulate real-world attacks
• Validate security controls against defence and government compliance frameworks, and prepare technical evidence and PoCs for external audits
• Work with engineering teams to triage findings, guide fixes, and re-test before production releases

Job Description: Senior Cyber Security Consultant

Experience: 5+ Years

Role: Senior Cyber Security Consultant – VAPT & Security Compliance

Employment Type: Full-Time

Job Overview

We are looking for an experienced Cyber Security professional with 5+ years of hands-on experience in VAPT, security assessments, cloud security, Active Directory security, and compliance. The candidate will be responsible for conducting security assessments, identifying risks, ensuring compliance with security standards, and providing remediation guidance to clients.

Key Responsibilities

• Conduct Web Application, API, Network, Infrastructure, and Mobile Application VAPT.
• Perform internal and external penetration testing and Active Directory security assessments.
• Identify, validate, and document security vulnerabilities with remediation recommendations.
• Conduct Cloud Security assessments across AWS, Azure, and GCP environments.
• Perform security audits, risk assessments, and compliance gap assessments.
• Assist clients in implementing security controls and meeting compliance requirements.
• Prepare detailed technical reports and executive-level security assessment reports.
• Lead security assessments and coordinate with clients and internal teams.
• Review security configurations, architecture, and technical controls.
• Provide guidance and mentorship to junior security engineers.

Technical Requirements

• 5+ years of hands-on experience in Cyber Security, VAPT, and Security Assessments.
• Strong understanding of OWASP Top 10, API Security, and common attack methodologies.
• Expertise in Active Directory security, privilege escalation, and internal network penetration testing.
• Strong knowledge of Linux, Windows, Networking, and security technologies.
• Experience with Cloud Security assessments (AWS/Azure/GCP).
• Familiarity with tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, and Kali Linux.
• Strong vulnerability analysis, exploitation, and remediation skills.

Compliance & Security Frameworks

• Knowledge and experience with ISO 27001/27002.
• Understanding of SOC 2 requirements and security controls.
• Familiarity with PCI DSS, NIST Cybersecurity Framework, and CIS Benchmarks.
• Experience in security audits, compliance assessments, risk management, and control validation.
• Ability to assist in compliance documentation, evidence collection, and remediation tracking.
• Knowledge of GDPR and other relevant security and privacy regulations is an advantage.

Preferred Certifications

• OSCP / OSCP+
• CEH / CEH Master
• CISSP
• CISA / CISM
• ISO 27001 Lead Auditor / Lead Implementer
• CREST or other relevant security certifications

Candidate Expectations

• Strong analytical, problem-solving, and communication skills.
• Ability to independently manage security assessments and client engagements.
• Experience in technical report writing and presenting security findings.
• Ability to work with cross-functional teams and provide actionable security recommendations.
• Demonstrated practical knowledge through real-world projects and assessments.

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

About the team

SecurITe’s mission is to build an Agentic‑AI driven security platform that protects critical infrastructure from modern cyber threats. Our focus is on delivering highly performant, resilient, and intelligent network security systems that help defenders stay ahead of adversaries.

About the Role

We’re looking for a seasoned Senior Quality Engineer to provide technical leadership and architectural oversight for our next‑generation cybersecurity AI platform. In this high-impact role, you will define the technical strategy for quality assurance, ensuring our agentic AI transforms cyber defense with unparalleled reliability.

You will be responsible for the end-to-end quality lifecycle, from architectural reviews to the deployment of scalable automation frameworks. Beyond technical execution, you will serve as a mentor to junior team members, fostering a culture of technical excellence and driving the strategy that ensures our solutions meet the rigorous demands of critical infrastructure protection.

What You’ll Do

●    Defining and driving comprehensive QA strategies and roadmaps for the cybersecurity platform.

●    Designing, developing, and executing test plans, test cases, and automated scripts to ensure software quality.

●    Performing functional, regression, performance, scalability and security testing to identify bugs or defects.

●    Collaborating with developers, product managers, and other stakeholders to understand product requirements and testing needs.

●    Identifying, documenting, and tracking software defects, ensuring clear communication of issues and their resolutions.

●    Leading deep-dive root-cause analysis for critical system defects and security vulnerabilities.

●    Conducting thorough reviews of product specifications and software design to identify potential areas of concern before testing.

●    Architecting and designing complex, scalable test automation frameworks to optimize CI/CD velocity.

●    Ensuring the software meets customer and business requirements by validating the functionality and performance.

●    Assisting in continuously improving QA processes, tools, and best practices to enhance software testing efficiency and effectiveness.

●    Supporting user acceptance testing (UAT) and assisting clients with product validation.

●    Mentoring junior and mid-level engineers, providing technical guidance and conducting architectural reviews.

Required Experience

●    A Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or a related field.

●    8-10 years of proven experience in quality engineering, specifically within network cybersecurity, Identity Providers, or AI-integrated platforms.

●    Expertise in manual and automated testing.

●    Deep domain expertise in complex system validation and advanced automation practices at scale.

●    Proficiency in programming languages like Python to build and run automated test scripts.

●    "Strong knowledge of software testing methodologies, performance testing tools (e.g., JMeter, k6), and security traffic generation/simulation tools (e.g., Ixia BreakingPoint, Scapy, or Snort/Suricata traffic generators)."

●    Understanding of continuous integration/continuous deployment (CI/CD) pipelines and version control systems like Git.

●    Strong communication skills for documenting test results and interacting with cross-functional teams.

●    Excellent analytical skills, attention to detail, and problem-solving ability.

●    Ability to work independently as well as collaboratively in a team environment.

●    A curious mindset with a willingness to quickly learn new technologies and testing tools.

Required Skills & Qualifications

●    Familiarity with cloud-based testing environments (GCP, AWS, Azure).

●    Experience with cybersecurity products or cloud services or IDP or Web UI

The Mindset

●    Problem Solver: You thrive on complex, ambiguous challenges and engineer elegant solutions.

●    Ownership‑Driven: You take initiative, move fast, and deliver outcomes without hand‑holding.

●    Continuous Learner: You stay ahead of the curve in AI, ML, and emerging technologies.

●    Startup DNA: You excel in fast‑moving environments where priorities evolve and impact is immediate.

Senior Automation Testing Engineer

Location: Bengaluru / Gurugram – Onsite

Experience: 5–11 Years

Employment Type: Full-Time

Key Responsibilities

• Develop and maintain automation test frameworks and scripts.
• Perform both manual and automation testing, including exploratory, functional, regression, and bug verification.
• Develop test cases and contribute to test planning, estimation, and Agile ceremonies.
• Perform non-functional testing for accuracy, reliability, and performance.
• Drive QA process and automation improvements.

Required Skills

• BE/B.Tech/ME/M.Tech in CS/ECE/EE or related field.
• 5–11 years of software testing experience.
• Strong hands-on experience with Python/Java, Selenium, Cucumber, and PyTest.
• Good knowledge of SDLC, testing methodologies, defect lifecycle, and risk assessment.
• Experience with version control and bug-tracking tools.

Good to Have: Linux, Qt/QML, Squish, ISTQB/CSM/PSM, and regulatory/compliance standards.

We are seeking a skilled Automation Test Engineer with strong hands-on experience in Python-based automation frameworks. The ideal candidate should have solid experience in designing, developing, and maintaining automation test suites for web and API applications, ensuring high product quality and test coverage.

Key Responsibilities

Design, develop, and maintain automation test scripts using Python.

Develop and execute test cases for functional, regression, API, and integration testing.

Build and enhance test automation frameworks (Selenium / PyTest / Robot Framework etc.).

Perform API testing using tools like Postman, RestAssured, or Python requests library.

Collaborate closely with developers, BAs, and DevOps teams to ensure continuous integration and quality delivery.

Analyze test results, log defects, and track them to closure.

Participate in sprint planning, daily standups, and release execution.

Contribute to improving QA processes, tools, and standards.

Required Skills & Experience

3–4 years of experience in Automation Testing.

Strong programming skills in Python.

Hands-on experience with Selenium WebDriver.

Experience with automation frameworks like PyTest / Robot Framework / Behave.

Good understanding of API testing and automation (REST/JSON).

Experience working with CI/CD pipelines (GitLab CI, Jenkins, Azure DevOps, etc.).

Knowledge of version control (Git).

Familiarity with Agile development methodologies.

Strong debugging, analytical, and communication skills.

Nice to Have

Experience with performance testing tools (e.g., JMeter, Locust).

Working knowledge of Docker or cloud platforms (AWS/Azure/GCP).

Exposure to Mobile Application automation (Appium).

ISTQB Certification or equivalent is a plus.

Education

Bachelor’s degree in Computer Science, Engineering, or equivalent related field.

About the role

You will create and validate the detection content that protects our customers: IDPS signatures, application control rules, and DLP rules. This is a hands-on role in our security lab, where you will generate real attack traffic, research vulnerabilities and applications, and make sure every rule is accurate, effective, and ready for production.

What you'll do

Write security rules

• Write IDPS signatures for exploits, malware, command-and-control traffic, and network attacks, with the right severity, action (alert / block / reject), and protocol scope
• Build application control rules to identify and control social media, streaming, file sharing, remote access, unsanctioned SaaS, and AI tools
• Create DLP rules to detect sensitive data (personal and financial data, confidential documents, source code) across web, email, and file transfer channels

Test and validate

• Set up test scenarios in our lab and generate traffic using browsers, command-line tools, packet captures, and safe proof-of-concept exploits
• Confirm that each rule triggers and that logs show the correct rule, severity, action, and source
• Test against normal everyday traffic to find and fix false positives before rules ship
• Build and maintain a repeatable test set so rules keep working after product updates

Research and document

• Track new CVEs, exploit techniques, and emerging applications, and turn them into working detections
• Study public r
• Study public rulesets to learn coverage patterns and find gaps in our own
• Write a short validation note for each batch: what it detects, how it was tested, and what it doesn't cover

What we're looking for

• 2-5 years of hands-on experience writing detection rules or signatures with Snort, Suricata, Zeek, YARA, Sigma, or similar
• Strong networking fundamentals: TCP/IP, HTTP/HTTPS, DNS, TLS, and packet analysis with Wireshark or pcap tools
• Experience testing rules with PoC exploits and tuning them to reduce false positives
• Exposure to CVE and vulnerability research, with the ability to read advisories and turn them into detections
• Working knowledge of Python or Bash for test automation, and comfort with Linux
• Clear written communication, since you'll document what each rule covers and what it doesn't

Good to have

• Experience with deep packet inspection, application identification (nDPI or similar), or DLP regex and pattern work
• Background at a network security vendor (firewall, IPS, NGFW, secure web gateway)
• Public work such as GitHub rules, blog posts, CVE credits, or CTF participation

This role is not

A SOC monitoring, alert triage, or pure penetration testing role. We are looking for people who write and test detection rules.

Job Description

Role: Python Automation

Experience; 3+ years

Location: Bengaluru

Work mode: Hybrid

Interview Mode: Face to face - mandatory

Who are we looking for?

Technical Skills:

Mandatory

• 3 years experience in Python automation and Selenium
• Strong hands-on experience in Python programming and automation.
• Good experience with Selenium WebDriver and web application automation.
• Experience with Pandas, Excel, CSV, JSON, Regex, and file handling.
• Understanding of HTML, CSS, JavaScript, and web application concepts.
• Familiarity with Git/GitHub and Jenkins/CI-CD.
• Good debugging, problem-solving, analytical, and communication skills.

Process Skills:

• Experience with PyAutoGUI or desktop automation.
• Experience working in Linux and Windows environments.
• Knowledge of automation frameworks and software testing practices.

Behavioral Skills:

• Attitude towards learning new technologies and solving complex technical problems.
• Quick learner and team player
• Excellent communication skills

Certification/Qualification:

• Education qualification: B.Tech, BE, or equivalent technical degree from a reputed college linkedin post