Top Tech Jobs & Startup Jobs in Mumbai

Conduct advanced web, mobile, and API penetration testing; perform red team application assessments; develop automation and bypass tools; research WAF evasion; reverse-engineer applications; identify business logic vulnerabilities; produce technical reports; support secure design reviews and remediation; and mentor junior security testers.

Manage the complete bid lifecycle from opportunity qualification through submission. Develop persuasive proposals and RFP responses, coordinate sales, technical, delivery, and leadership inputs, engage clients, conduct market and competitor research, and ensure compliance with legal and company requirements. Maintain bid repositories, analyze feedback, and improve proposal processes while meeting strict deadlines.

Conducts multi-domain red team engagements, including internal and external penetration testing, social engineering, physical intrusion assessments, and APT-style threat emulation. Exploits enterprise weaknesses, develops attack tools and infrastructure, maps adversary behavior to MITRE ATT&CK, and delivers technical and executive reports. The role also supports detection improvement, tabletop exercises, stakeholder debriefs, and mentoring junior team members.

Lead mobile application security assessments across Android and iOS, conducting automated and manual penetration testing, reverse engineering, runtime analysis, and vulnerability identification. Prepare technical reports with risk ratings, proof-of-concept evidence, and remediation guidance. Engage client AppDev, QA, and InfoSec stakeholders, review junior analysts’ deliverables, support presales estimation, and mentor security team members.

Administer and monitor enterprise DLP tools, validate alerts, handle incidents, tune and optimize data protection policies, and collaborate with SOC teams on compliance. The role also requires documenting incidents, resolutions, and policy changes, analyzing alerts, validating root causes, and supporting policy creation and management.

Business Analyst responsible for eliciting and documenting requirements, translating business needs into user stories and acceptance criteria, coordinating UAT, supporting Agile and waterfall delivery, managing change control, and facilitating stakeholder collaboration from proof of concept through implementation and business-as-usual operations.

Develop and deploy AI/ML applications, LLM integrations, automation workflows, chatbots, recommendation systems, and intelligent assistants. Build RAG solutions using prompt engineering and vector databases, integrate AI with backend systems and APIs, optimize models, and support testing, monitoring, documentation, and technical design. Collaborate with product, engineering, cybersecurity, and business teams in a fast-paced product environment.

Perform manual secure source code reviews across web, API, mobile, cloud-native, and microservices applications. Identify vulnerabilities involving access control, injection, authentication, cloud and container security, business logic, and AI/LLM risks. Conduct threat modeling, secure architecture reviews, API and cloud security assessments, IaC reviews, and Secure SDLC assessments. Provide developer-focused remediation guidance and review enterprise-scale codebases using leading application security tools.

Supports end-to-end product implementation, including configuration, deployment, data migration, testing, documentation, and go-live readiness. Coordinates with development, infrastructure, clients, and business stakeholders to gather requirements, resolve issues, conduct training, and ensure successful UAT and production rollouts. Provides post-implementation troubleshooting and L1/L2 support for configuration, data, and environment issues.

Performs web, mobile, and API security testing for BFSI applications. Identifies and validates vulnerabilities including authentication, authorization, injection, sensitive data exposure, and business logic issues. Uses Burp Suite, MobSF, OWASP ZAP, and Postman; conducts retesting, prepares vulnerability reports, supports remediation validation, and responds to client queries. Requires 1–2 years of experience, application security fundamentals, and a relevant bachelor’s degree.