Company: Foresee Security (NMT Security Innovations Pvt. Ltd.)

Location: Noida, India (On-site)

Experience: 3–5 Years

Employment Type: Full-time

Open Positions: 1

Joining: Immediate / Short Notice Preferred

Compensation: As per market standards

Certifications: CEH + One Hands-on Certification (Mandatory)

About Foresee Security

Foresee Security is an AI-powered cyber risk decision intelligence platform helping organizations identify, connect, and prioritize cybersecurity risks.

Our unified platform brings together External Exposure Intelligence, Third-Party Risk Intelligence, Continuous Compliance Intelligence, and AI Governance to help enterprises proactively manage cybersecurity risks and make smarter security decisions.

Website: www.foreseesecurity.io

About the Role

We are looking for an experienced, hands-on VAPT Specialist to join our cybersecurity team.

This role combines client-facing penetration testing engagements with security research, vulnerability validation, and detection engineering for our External Attack Surface Intelligence platform.

The selected candidate will spend approximately 60% of their time on client VAPT engagements and 40% on product security validation and development.

Key Responsibilities

1. Penetration Testing & Client Delivery (60%)

- Independently plan and execute VAPT engagements for web applications, APIs, mobile applications (Android/iOS), networks, and cloud environments.
- Perform AI/LLM application security testing, including prompt injection, jailbreaks, RAG data leakage, and agent/tool abuse.
- Identify and validate vulnerabilities such as IDOR, broken access control, authentication bypass, business logic flaws, and chained exploits.
- Conduct manual penetration testing beyond automated vulnerability scanning.




- Prepare comprehensive VAPT reports with risk ratings, proof of concept, business impact, and remediation recommendations.
- Conduct retesting and work with client teams to validate remediation.
- Support security assessments aligned with OWASP, RBI, SEBI, CERT-In, and ISO 27001 requirements.

2. External Attack Surface Intelligence (40%)

- Validate vulnerabilities and security exposures identified by the Foresee Security platform.
- Identify false positives and false negatives to improve detection accuracy.
- Perform attack surface discovery using Amass, Subfinder, httpx, Nuclei, Shodan, and Censys.
- Develop Nuclei templates, Python scripts, and automated vulnerability detection checks.
- Translate manual security research findings into scalable detection capabilities.
- Collaborate with engineering and product teams to improve the platform's security intelligence.

Required Technical Skills

- 3–5 years of hands-on penetration testing experience.
- At least 2 years of independently delivering client VAPT engagements.
- Strong manual web application and API penetration testing skills.
- Proficiency in Burp Suite Professional, Nmap, Metasploit, and Nuclei.
- Experience in network reconnaissance, DNS enumeration, service fingerprinting, and vulnerability validation.
- Practical knowledge of cloud security assessments (AWS, Azure, or GCP).
- Understanding of OWASP Top 10,



OWASP API Security Top 10, OWASP MASVS, and CVSS.
- Working knowledge of Python or Bash scripting.
- Knowledge of AI/LLM security vulnerabilities and testing methodologies.
- Solid technical documentation, reporting, and client communication skills.

Mandatory Certifications

Candidates must hold both

- Certified Ethical Hacker (CEH) – Mandatory
- At least one hands-on certification: OSCP, OSWE, eWPTX, CRTP, or CPTS.

Applications without CEH certification will not be considered.

Good to Have

- Hands-on LLM security testing using Garak, PyRIT, or Promptfoo.
- Experience developing custom Nuclei templates.
- Experience working with EASM or vulnerability management platforms.
- Bug bounty achievements, CVE discoveries, or published security research.
- Mobile security testing using Frida, Objection, or MobSF.
- Experience with RBI, SEBI, or financial-sector cybersecurity assessments.

Why Join Foresee Security?

- Work on an AI-powered cybersecurity product used for enterprise risk intelligence.
- Combine offensive security research with real-world product development.
- Contribute to vulnerability detection and security automation capabilities.
- Work on diverse enterprise penetration testing engagements.
- Collaborate directly with the founding, product, and engineering teams.
- Opportunity to grow into advanced offensive security and security research roles.

Hiring Process

1. Initial profile and certification screening.
2. Technical screening interview.
3. Hands-on penetration testing assessment, including an AI/LLM security exercise.
4. Final technical and founder interview.

Foresee Security

One Platform. Connected Risks. Smarter Decisions.

www.foreseesecurity.io

📌 Offensive Security Engineer (Noida)
🏢 Foresee Security
📍 Noida