Build the platform attackers haven’t seen yet.

Start your offensive-security career under senior mentorship. You will shadow real engagements, own scoped components of pentests, and grow into web, API, network, and AD testing.

Run web, API, and internal network engagements end to end. You own scope, execution, and the report. Expect to touch cloud, mobile, and AD on any given month — we do not split engineers by service line.

Lead engagements across the full offensive stack. You chain vulnerabilities, find the non-obvious business-logic flaws, and mentor the juniors in the practice. You also feed real attack chains into Sentinel’s agent library.

Own our offensive practice methodology. You set how we test, what gets automated into Sentinel, and what stays human. Client-facing on complex engagements, internal-facing on how the team grows.

Run objective-driven and assumed-breach engagements. OSINT, initial access, C2, lateral movement, reporting — the full chain. You care about stealth and operational hygiene, not just flags.

Lead red team engagements for banks and critical infrastructure. You scope the objectives, design the kill chain, run the op, and brief the CISO. You also build the internal toolset the rest of the team uses.

Build the agent reasoning behind Sentinel and Recon. Turn recon data and PoCs into an orchestrator that plans like a pentester. You care about eval harnesses as much as clever prompts.

Own the agent architecture for Kavach. You decide what each agent does, how they share state, how we eval them, and how we stop them hallucinating in production. Partner closely with the offensive team.

Ship the Kavach operator console and the customer portal. TypeScript and Next.js on the front, Go on the back. You will own features from schema to pixel.

Lead major features across the Kavach platform. You will own multi-quarter projects — operator console, findings workflow, customer portal — and shape how the UI and API evolve together.

Translate regulatory clauses into machine-readable checks. Ship new frameworks into Compass and make them audit-defensible. You will work alongside legal and offensive engineers, not in a silo.

Arbitrate edge-case submissions on Hive. Validate PoCs, score severity, and communicate crisply with both researchers and customer AppSec teams. You care about researcher fairness and customer signal in equal measure.

Design dense, data-rich interfaces for security operators who live in your UI all day. Kavach is visual-first — this role owns the feel of the product.

Grow the Kavach researcher and AppSec community. Write, demo, speak, and ship reference integrations — make Kavach the default platform people build on.