- Hyderabad, Telangana, India
- On-site
- Full-time · Mid
- 2–5 years
Offensive and defensive security engineer responsible for penetration testing, red‑team exercises, vulnerability assessment, and building security controls for Turium AI’s AI, cloud, and infrastructure systems.
Responsibilities
- Conduct authorised penetration testing across web, mobile, API, cloud, and internal systems
- Discover and demonstrate vulnerabilities such as SQL injection, authentication bypass, broken access controls, SSRF, RCE, XSS, insecure deserialisation, privilege escalation
- Perform red‑team exercises simulating realistic attacker behaviour
- Test identity systems, SSO, OAuth 2.0, OIDC, SAML, passkeys, and authentication workflows
- Identify weaknesses in network segmentation, Kubernetes environments, containers, and cloud configurations
Requirements
- Nice to have: bug bounty programs
- Nice to have: responsible vulnerability disclosure
- Nice to have: security research
- Nice to have: published CVEs
- Nice to have: GitHub security projects