Company: Foresee Security (NMT Security Innovations Pvt. Ltd.)

Location:
Noida, India (On-site)

Experience:
3–5 Years Employment Type: Full-time Open Positions: 1 Joining: Immediate / Short Notice Preferred Compensation: As per market standards Certifications: CEH + One Hands-on Certification (Mandatory) About Foresee Security Foresee Security is an AI-powered cyber risk decision intelligence platform helping organizations identify, connect, and prioritize cybersecurity risks. Our unified platform brings together External Exposure Intelligence, Third-Party Risk Intelligence, Continuous Compliance Intelligence, and AI Governance to help enterprises proactively manage cybersecurity risks and make smarter security decisions. Website: www.foreseesecurity.io

About the Role
We are looking for an experienced, hands-on VAPT Specialist to join our cybersecurity team. This role combines client-facing penetration testing engagements with security research, vulnerability validation, and detection engineering for our External Attack Surface Intelligence platform. The selected candidate will spend approximately 60% of their time on client VAPT engagements and 40% on product security validation and development.

Key Responsibilities
1. Penetration Testing & Client Delivery (60%)
• Independently plan and execute VAPT engagements for web applications, APIs, mobile applications (Android/iOS), networks, and cloud environments.
• Perform AI/LLM application security testing, including prompt injection, jailbreaks, RAG data leakage, and agent/tool abuse.
• Identify and validate vulnerabilities such as IDOR, broken access control, authentication bypass, business logic flaws, and chained exploits.
• Conduct manual penetration testing beyond automated vulnerability scanning.




• Prepare comprehensive VAPT reports with risk ratings, proof of concept, business impact, and remediation recommendations.
• Conduct retesting and work with client teams to validate remediation.
• Support security assessments aligned with OWASP, RBI, SEBI, CERT-In, and ISO 27001 requirements. 2. External Attack Surface Intelligence (40%)
• Validate vulnerabilities and security exposures identified by the Foresee Security platform.
• Identify false positives and false negatives to improve detection accuracy.
• Perform attack surface discovery using Amass, Subfinder, httpx, Nuclei, Shodan, and Censys.
• Develop Nuclei templates, Python scripts, and automated vulnerability detection checks.
• Translate manual security research findings into scalable detection capabilities.
• Collaborate with engineering and product teams to improve the platform's security intelligence. Required Technical Skills
• 3–5 years of hands-on penetration testing experience.
• At least 2 years of independently delivering client VAPT engagements.
• Strong manual web application and API penetration testing skills.
• Proficiency in Burp Suite Professional, Nmap, Metasploit, and Nuclei.
• Experience in network reconnaissance, DNS enumeration, service fingerprinting, and vulnerability validation.
• Practical knowledge of cloud security assessments (AWS, Azure, or GCP).
• Understanding of OWASP Top 10, OWASP API Security Top 10,



OWASP MASVS, and CVSS.
• Working knowledge of Python or Bash scripting.
• Knowledge of AI/LLM security vulnerabilities and testing methodologies.
• Robust technical documentation, reporting, and client communication skills. Mandatory Certifications Candidates must hold both:
• Certified Ethical Hacker (CEH) – Mandatory
• At least one hands-on certification: OSCP, OSWE, eWPTX, CRTP, or CPTS. Applications without CEH certification will not be considered. Good to Have
• Hands-on LLM security testing using Garak, PyRIT, or Promptfoo.
• Experience developing custom Nuclei templates.
• Experience working with EASM or vulnerability management platforms.
• Bug bounty achievements, CVE discoveries, or published security research.
• Mobile security testing using Frida, Objection, or MobSF.
• Experience with RBI, SEBI, or financial-sector cybersecurity assessments. Why Join Foresee Security?
• Work on an AI-powered cybersecurity product used for enterprise risk intelligence.
• Combine offensive security research with real-world product development.
• Contribute to vulnerability detection and security automation capabilities.
• Work on diverse enterprise penetration testing engagements.
• Collaborate directly with the founding, product, and engineering teams.
• Opportunity to grow into advanced offensive security and security research roles. Hiring Process
• Initial profile and certification screening.
• Technical screening interview.
• Hands-on penetration testing assessment, including an AI/LLM security exercise.
• Final technical and founder interview. Foresee Security One Platform. Connected Risks. Smarter Decisions. www.foreseesecurity.io

📌 Offensive Security Engineer (Noida)
🏢 Foresee Security
📍 Noida