Conduct advanced web, mobile, and API penetration testing; perform red team application assessments; develop automation and bypass tools; research WAF evasion; reverse-engineer applications; identify business logic vulnerabilities; produce technical reports; support secure design reviews and remediation; and mentor junior security testers.
Location: Navi Mumbai
Employment Type: Full-Time
Experience: 3–6+ Years
About the Role
We are looking for a highly skilled Application Security / Offensive Security Engineer with a strong Red Team mindset to join our team. The role involves advanced penetration testing across Web, Mobile (Android & iOS), and APIs, focusing on real-world exploitation, vulnerability chaining, and bypassing modern security controls such as WAFs and client-side protections. If you thrive on deep technical challenges, scripting, and continuous research into emerging attack techniques, this role is for you.
Key Responsibilities
· Perform in-depth Web, Mobile, and API penetration testing with emphasis on exploitation and chaining vulnerabilities.
· Conduct Red Team-style application assessments across WAPT, MAPT, and API engagements.
· Develop custom scripts and tools to automate testing and bypass client-side security controls.
· Research and implement WAF evasion and bypass techniques.
· Reverse-engineer client-side and backend application logic.
· Identify business logic flaws and advanced attack paths.
· Deliver high-quality technical reports with reproduction steps, impact analysis, and remediation guidance.
· Stay updated with the latest vulnerabilities, attack techniques, and frameworks.
· Collaborate with development and security teams for secure design reviews and remediation.
Required Skills & Qualifications
· Strong hands-on experience in Web, Mobile (Android/iOS), and API Penetration Testing.
· Solid understanding of OWASP Top 10 (Web, Mobile, API).
· Experience with Java and JavaScript debugging.
· Ability to read, understand, and analyze JavaScript and Python code.
· Proficiency in Python (or equivalent scripting language) for automation and bypass tooling.
· Knowledge of modern web frameworks (React, Angular, Vue, Node.js, Spring Boot).
· Strong grasp of authentication, authorization, session management, and token-based security (OAuth, JWT, SAML).
· Familiarity with WAF technologies and bypass methodologies.
· Hands-on experience with Burp Suite, Frida, Objection, Postman, and mobile reversing tools.
Preferred Certifications
· OSCP
· eWPTX / eMAPT
· CRTP
Behavioural & Professional Attributes
· Strong research-driven and attacker mindset.
· Ability to work independently and lead complex security engagements.
· Excellent documentation and communication skills.
· Detail-oriented with a passion for deep technical problem-solving.
· Capability to mentor junior security testers.
Why Join Us?
· Opportunity to work on cutting-edge offensive security projects.
· Exposure to advanced Red Team engagements.
· Collaborative environment with continuous learning and growth.
Talakunchi Networks Private Limited Dombivli, Mahārāshtra, IND Office
Dombivli, India
Talakunchi Networks Private Limited Mumbai, Maharashtra, IND Office
Mumbai, India
Similar Jobs
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Business Analyst responsible for analyzing and translating business requirements into functional specifications and user stories for Avaloq-based wealth management platforms. The role supports digital transformation initiatives, collaborates across business and IT teams, manages stakeholders, and operates within Agile delivery environments using Jira and Confluence. Experience with global multinational banks is preferred.
Top Skills:
AgileAvaloqConfluenceJIRA
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Manage end-to-end transaction banking and retail payments projects within the BFSI sector, including compliance and regulatory initiatives. Lead Agile delivery, ISO 20022 payments projects, stakeholder communications across multiple geographies, release cycles, delivery management, RAID tracking, escalations, and senior stakeholder engagement. Mobile release management experience is preferred.
Top Skills:
AgileConfluenceIso 20022JIRA
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
Business Analyst responsible for payments and digital journey initiatives within retail and global banking. The role involves requirements elicitation, backlog and Agile delivery management, customer channel analysis, MVP prioritization, epics and user stories, stakeholder alignment, market and As-Is analysis, solution walkthroughs, implementation support, and coordination across business, technology, operations, risk, legal, compliance, and UX teams.
Top Skills:
ConfluenceJIRA
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
