Offensive Security Engineer

Company: Foresee Security (NMT Security Innovations Pvt. Ltd.)
Location: Noida, India (On-site)
Experience: 3–5 Years
Employment Type: Full-time
Open Positions: 1
Joining: Immediate / Short Notice Preferred
Compensation: As per market standards
Certifications: CEH + One Hands-on Certification (Mandatory)
About Foresee Security
Foresee Security is an AI-powered cyber risk decision intelligence platform helping organizations identify, connect, and prioritize cybersecurity risks.
Our unified platform brings together External Exposure Intelligence, Third-Party Risk Intelligence, Continuous Compliance Intelligence, and AI Governance to help enterprises proactively manage cybersecurity risks and make smarter security decisions.
Website: www.foreseesecurity.io
About the Role
We are looking for an experienced, hands-on VAPT Specialist to join our cybersecurity team.
This role combines client-facing penetration testing engagements with security research, vulnerability validation, and detection engineering for our External Attack Surface Intelligence platform.
The selected candidate will spend approximately 60% of their time on client VAPT engagements and 40% on product security validation and development.
Key Responsibilities
1. Penetration Testing & Client Delivery (60%)
Independently plan and execute VAPT engagements for web applications, APIs, mobile applications (Android/iOS), networks, and cloud environments.
Perform AI/LLM application security testing, including prompt injection, jailbreaks, RAG data leakage, and agent/tool abuse.
Identify and validate vulnerabilities such as IDOR, broken access control, authentication bypass, business logic flaws, and chained exploits.
Conduct manual penetration testing beyond automated vulnerability scanning.
Prepare comprehensive VAPT reports with risk ratings, proof of concept, business impact, and remediation recommendations.
Conduct retesting and work with client teams to validate remediation.
Support security assessments aligned with OWASP, RBI, SEBI, CERT-In, and ISO 27001 requirements.
2. External Attack Surface Intelligence (40%)
Validate vulnerabilities and security exposures identified by the Foresee Security platform.
Identify false positives and false negatives to improve detection accuracy.
Perform attack surface discovery using Amass, Subfinder, httpx, Nuclei, Shodan, and Censys.
Develop Nuclei templates, Python scripts, and automated vulnerability detection checks.
Translate manual security research findings into scalable detection capabilities.
Collaborate with engineering and product teams to improve the platform's security intelligence.
Required Technical Skills
3–5 years of hands-on penetration testing experience.
At least 2 years of independently delivering client VAPT engagements.
Strong manual web application and API penetration testing skills.
Proficiency in Burp Suite Professional, Nmap, Metasploit, and Nuclei.
Experience in network reconnaissance, DNS enumeration, service fingerprinting, and vulnerability validation.
Practical knowledge of cloud security assessments (AWS, Azure, or GCP).
Understanding of OWASP Top 10, OWASP API Security Top 10, OWASP MASVS, and CVSS.
Working knowledge of Python or Bash scripting.
Knowledge of AI/LLM security vulnerabilities and testing methodologies.
Strong technical documentation, reporting, and client communication skills.
Mandatory Certifications
Candidates must hold both:
Certified Ethical Hacker (CEH) – Mandatory
At least one hands-on certification: OSCP, OSWE, eWPTX, CRTP, or CPTS.
Applications without CEH certification will not be considered.
Good to Have
Hands-on LLM security testing using Garak, PyRIT, or Promptfoo.
Experience developing custom Nuclei templates.
Experience working with EASM or vulnerability management platforms.
Bug bounty achievements, CVE discoveries, or published security research.
Mobile security testing using Frida, Objection, or MobSF.
Experience with RBI, SEBI, or financial-sector cybersecurity assessments.
Why Join Foresee Security?
Work on an AI-powered cybersecurity product used for enterprise risk intelligence.
Combine offensive security research with real-world product development.
Contribute to vulnerability detection and security automation capabilities.
Work on diverse enterprise penetration testing engagements.
Collaborate directly with the founding, product, and engineering teams.
Opportunity to grow into advanced offensive security and security research roles.
Hiring Process
Initial profile and certification screening.
Technical screening interview.
Hands-on penetration testing assessment, including an AI/LLM security exercise.
Final technical and founder interview.
Foresee Security
One Platform. Connected Risks. Smarter Decisions.
www.foreseesecurity.io

Work arrangement
No