Security Brigade is hiring a Senior Security Researcher to work alongside ShadowMap, our proprietary attack surface management platform. You will analyse alerts the platform surfaces - web and mobile application exposure, data leaks, dark-web findings, and exposed code repositories - validate them through hands-on penetration testing, and drive remediation conversations directly with customer engineering and security teams. You will own customer-facing technical engagements end-to-end: scoping the validation, demonstrating proof-of-concept, helping the customer fix what we found, and contributing back research that improves the platform itself.
Responsibilities
Analyse the attack surface intelligence ShadowMap surfaces - web/mobile alerts, data leaks, dark-web exposure, code-repo leakage, exposed services
Validate findings through targeted manual penetration testing; produce proof-of-concept exploits where customers need evidence
Lead client-facing remediation conversations including executive summaries, technical walkthroughs, and follow-up validation
Collaborate with customer engineering teams to ship fixes and revalidate them
Feed research back into ShadowMap - new attack patterns,
false-positive reduction, scoring improvements, recent detection ideas
Mentor junior researchers and contribute to internal knowledge-sharing
Requirements
4+ years of hands-on web application penetration testing experience
Deep working knowledge of OWASP Top 10 and the OWASP Top 10 Proactive Controls - both how to attack and how to advise on remediation
Comfortable working customer-side: presenting findings to engineering teams, demonstrating exploits live, and walking remediation owners through fixes
Track record on practical labs (Hack The Box, TryHackMe, PortSwigger Web Security Academy) is a solid signal even without enterprise experience
Excellent written communication for client-facing reports and executive summaries
Quick Facts
Team: Product ShadowMap
Location: Mumbai / Remote
Type: Full time
Level: Senior
Disclaimer: This job posting & location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.