Run hands-on application, network, and cloud security testing with structured senior review and direct customer interaction from day one.

OWASP Top 10 Associate Cybersecurity Consultant | Security Brigade

AI Threat Era

Associate Cybersecurity Consultant

Run hands-on application, network, and cloud security testing with structured senior review and direct customer interaction from day one.

OWASP Top 10 Ready to apply

Send us your CV and a short note on why this role excites you.

Usually responds within 2 business days

About the Role

Security Brigade is hiring an Associate Cybersecurity Consultant to join our offensive security practice. You will run hands-on security assessments - web and mobile application testing, network vulnerability and penetration testing, source code review, configuration review, cloud security, and API security - and you will be reviewed end-to-end through our L1/L2/L3 senior chain so you grow under structured mentorship. You will work directly with customers across BFSI, fintech, healthcare, government, and tech-sector enterprises.

This is a strong fit for engineers one to three years out of college who want a real path into deep offensive security.

What Youll Do

- Run web and mobile application security testing, vulnerability assessments, source code reviews, configuration reviews, cloud security, and API security testing
- Profile applications, model threats, and design test cases to target identified threats - across modern stacks
- Identify and exploit vulnerabilities in applications and networks; document with reproducible proof-of-concept




- Manage engagement timelines and customer interactions across delivery
- Produce reports against internal templates with explicit remediation guidance
- Run customer-facing remediation conversations with engineering teams
- Research emerging security topics and new attack techniques - and write tools / scripts to operationalise them
- Contribute to internal knowledge-sharing and Lemon platform improvements

What Were Looking For
- 1-3 years of hands-on security testing experience (internships and serious lab work count)
- Real working understanding of common security issues, exploitation techniques, and remediation - beyond memorised OWASP Top 10
- Disciplined manual testing approach - automated scanners are a start, not a finish
- Working development knowledge of at least one modern programming language
- Solid understanding of application and network security fundamentals
- Strong written and spoken English for client-quality reports and direct customer interaction
- Familiarity with frameworks like React / Django and the threat models that come with them
- Working knowledge of the standard offensive toolchain (Burp Proxy, Acunetix, sqlmap, Nmap, Nessus, Metasploit)

What We Offer- Sponsorship for offensive security certifications (OSCP, eWPTX, CRTO, BSCP)
- Mentorship from L2 / L3 senior researchers on every engagement
- Active community involvement (OWASP, Null, Nullcon) supported and encouraged

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 application security Professional (Mumbai)
🏢 Security Brigade
📍 Mumbai