04 Oct
|
P.I.V.O.T SECURITY PRIVATE
|
Delhi
04 Oct
P.I.V.O.T SECURITY PRIVATE
Delhi
Offensive Security Engineer (Product Development Internship)
Company: Pivot Security (pivotsec.in)
Experience: 0-1 year
Job type: Full-time
Location: New Delhi, Hybrid
About Pivot Security
P.I.V.O.T Security is a fast-growing leader at the forefront of offensive security, now serving in more than 10+ countries and strong presence in critical sectors. We protect organisations against highly sophisticated cyber threats through our services and offensive security platforms, finding and fixing the gaps attackers would exploit before they do. Our products cover browser security and data loss prevention, phishing simulation and awareness training, mailbox hardening, breach and attack simulation, application and API security testing, dark web threat intelligence, and an offensive cyber range for hands-on training.
About the Role
We're looking for an Offensive Security Engineer who can both think like an attacker and ship production-quality code. This is a hands-on product development role from internship for 2 month to final onboarding. You will research adversary techniques, turn them into features, build automation pipelines for agentic DAST and many more, and help shape the product from prototype to release.
What You'll Do
- Design and build offensive security product features, from research and prototyping to production
- Develop automation pipelines for reconnaissance, scanning, exploitation workflows, and reporting
- Turn adversary TTPs, mapped to the MITRE ATT&CK; framework, into detection-testing and emulation capabilities
- Integrate and extend open-source security tools (Nmap, Burp Suite, etc.) within our platform
- Perform and automate VAPT workflows across web, network, and infrastructure targets
- Study C2 frameworks, ransomware behavior, and APT tradecraft to inform product design and adversary simulation
- Build frontend and backend components for security dashboards and tooling
- Write clear technical documentation and share research findings with the team
Required Skills -
Programming and development
- Strong JavaScript and Node.js
- Experience with a modern frontend framework (React, Vue, Angular, or similar)
- Proficiency in Python for tooling and automation
- Working knowledge of PowerShell and Bash scripting
- Basic familiarity with Rust (willingness to grow is a plus)
- AI tool usage knowledge
Offensive security
- Solid understanding of VAPT methodologies (web, network, API)
- Hands-on experience with open-source tools such as Nmap and Burp Suite, plus recon tools (e.g., Amass, ffuf, Nuclei)
- Valuable understanding of the OWASP Top 10 and common vulnerability classes
- Experience building automation pipelines or CI/CD-style workflows for security tasks
Threat intelligence and adversary knowledge
- Conceptual understanding of C2 infrastructure and how it operates
- Understanding of ransomware attack lifecycles and behaviors
- Awareness of nation-state threat actors and APT groups
- Working knowledge of the MITRE ATT&CK; matrix and mapping TTPs
Nice to Have
- CTF participation, bug bounty experience, or published research or CVEs
- Certifications such as CEH, eJPT, OSCP, PNPT, or similar
- Experience with Docker, Git, and cloud environments (AWS, Azure, GCP)
- Familiarity with Active Directory attack paths and Windows internals
Who You Are
- Curious, with a self-driven attacker mindset
- Comfortable in a fast-moving product environment
- A clear communicator who documents your work
- Ethical and responsible when working with offensive capabilities
What We Offer
- Full ownership in a true product development role
- Work on cutting-edge offensive security technology
- Learning-focused culture with room to grow into senior research and engineering roles
- Competitive salary
How to Apply Apply via Indeed with your resume. Please include links to your GitHub, CTF profiles, blog, or any security tools you've built.
Pivot Security is an equal opportunity employer.
Pay: From ₹10,000.00 per month
Benefits
- Work from home
Work Location: Hybrid remote in Delhi
📌 Offensive Security Product Developer (Delhi)
🏢 P.I.V.O.T SECURITY PRIVATE
📍 Delhi