Conduct advanced web, mobile, and API penetration testing; perform red team application assessments; develop automation and bypass tools; research WAF evasion; reverse-engineer applications; identify business logic vulnerabilities; produce technical reports; support secure design reviews and remediation; and mentor junior security testers.
Location: Navi Mumbai
Employment Type: Full-Time
Experience: 3–6+ Years
About the Role
We are looking for a highly skilled Application Security / Offensive Security Engineer with a strong Red Team mindset to join our team. The role involves advanced penetration testing across Web, Mobile (Android & iOS), and APIs, focusing on real-world exploitation, vulnerability chaining, and bypassing modern security controls such as WAFs and client-side protections. If you thrive on deep technical challenges, scripting, and continuous research into emerging attack techniques, this role is for you.
Key Responsibilities
· Perform in-depth Web, Mobile, and API penetration testing with emphasis on exploitation and chaining vulnerabilities.
· Conduct Red Team-style application assessments across WAPT, MAPT, and API engagements.
· Develop custom scripts and tools to automate testing and bypass client-side security controls.
· Research and implement WAF evasion and bypass techniques.
· Reverse-engineer client-side and backend application logic.
· Identify business logic flaws and advanced attack paths.
· Deliver high-quality technical reports with reproduction steps, impact analysis, and remediation guidance.
· Stay updated with the latest vulnerabilities, attack techniques, and frameworks.
· Collaborate with development and security teams for secure design reviews and remediation.
Required Skills & Qualifications
· Strong hands-on experience in Web, Mobile (Android/iOS), and API Penetration Testing.
· Solid understanding of OWASP Top 10 (Web, Mobile, API).
· Experience with Java and JavaScript debugging.
· Ability to read, understand, and analyze JavaScript and Python code.
· Proficiency in Python (or equivalent scripting language) for automation and bypass tooling.
· Knowledge of modern web frameworks (React, Angular, Vue, Node.js, Spring Boot).
· Strong grasp of authentication, authorization, session management, and token-based security (OAuth, JWT, SAML).
· Familiarity with WAF technologies and bypass methodologies.
· Hands-on experience with Burp Suite, Frida, Objection, Postman, and mobile reversing tools.
Preferred Certifications
· OSCP
· eWPTX / eMAPT
· CRTP
Behavioural & Professional Attributes
· Strong research-driven and attacker mindset.
· Ability to work independently and lead complex security engagements.
· Excellent documentation and communication skills.
· Detail-oriented with a passion for deep technical problem-solving.
· Capability to mentor junior security testers.
Why Join Us?
· Opportunity to work on cutting-edge offensive security projects.
· Exposure to advanced Red Team engagements.
· Collaborative environment with continuous learning and growth.
Talakunchi Networks Private Limited Dombivli, Mahārāshtra, IND Office
Dombivli, India
Talakunchi Networks Private Limited Mumbai, Maharashtra, IND Office
Mumbai, India
Similar Jobs
Cloud • Information Technology • Security • Software • Cybersecurity
Build and maintain advanced threat detections and hunting logic across AWS and cloud infrastructures. Develop Python-based tooling, YAML and Sigma-like rules, GitLab CI/CD pipelines, automated playbooks, and scalable data workflows using Hadoop, Athena, and data lakes. Apply threat research, MITRE ATT&CK, and detection engineering practices to improve security visibility. The role includes operational support, weekend night shifts, and on-call rotations.
Top Skills:
Ai/MlAthenaAWSCi/CdGitGitlabGoHadoopLlmsMitre Att&CkNlpPythonRubySigmaYaml
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Provides technical and domain expertise during sales cycles for ServiceNow solutions. Leads discovery workshops, product demonstrations, customer technical discussions, and solution positioning while supporting sales goals. Partners with sales, product management, marketing, channel partners, and professional services; contributes product feedback, competitive analysis, reusable assets, territory planning, and marketing events.
Top Skills:
AICloud Software SolutionsServicenow Platform
Artificial Intelligence • Big Data • Enterprise Web • Fintech • Software • Financial Services
Develop scalable full-stack web applications and APIs using C#, .NET, AWS, SQL Server, and PostgreSQL. Responsibilities include designing reliable products, writing unit tests, practicing continuous integration and test-driven development, resolving production issues, improving system instrumentation, collaborating with product managers, following Agile practices, and applying secure, scalable software architecture. The role is based in Mumbai with a hybrid schedule.
Top Skills:
.Net.Net 8.Net CoreAmazon SqsAWSAws FargateAws LambdaC#Entity FrameworkJIRALinqMvcPostgresSQL ServerUnityWeb ApiXML
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
