Offensive Security Engineer (Product Development Internship) **Company:** Pivot Security (pivotsec.in) **Experience:** 0\-1 year **Job type:** Full\-time **Location:** New Delhi, Hybrid **About Pivot Security** P.I.V.O.T Security is a fast\-growing leader at the forefront of offensive security, now serving in more than 10\+ countries and strong presence in critical sectors. We protect organisations against highly sophisticated cyber threats through our services and offensive security platforms, finding and fixing the gaps attackers would exploit before they do. Our products cover browser security and data loss prevention, phishing simulation and awareness training, mailbox hardening, breach and attack simulation, application and API security testing, dark web threat intelligence, and an offensive cyber range for hands\-on training. **About the Role** We're looking for an Offensive Security Engineer who can both think like an attacker and ship production\-quality code. This is a hands\-on product development role from internship for 2 month to final onboarding. You will research adversary techniques, turn them into features, build automation pipelines for agentic DAST and many more, and help shape the product from prototype to release. **What You'll Do** * Design and build offensive security product features, from research and prototyping to production * Develop automation pipelines for reconnaissance, scanning, exploitation workflows, and reporting * Turn adversary TTPs, mapped to the MITRE ATT\&CK framework, into detection\-testing and emulation capabilities * Integrate and extend open\-source security tools (Nmap, Burp Suite, etc.) within our platform * Perform and automate VAPT workflows across web, network, and infrastructure targets * Study C2 frameworks, ransomware behavior, and APT tradecraft to inform product design and adversary simulation * Build frontend and backend components for security dashboards and tooling * Write clear technical documentation and share research findings with the team **Required Skills \-** **Programming and development** * Strong JavaScript and Node.js * Experience with a modern frontend framework (React, Vue, Angular, or similar) * Proficiency in Python for tooling and automation * Working knowledge of PowerShell and Bash scripting * Basic familiarity with Rust (willingness to grow is a plus) * AI tool usage knowledge **Offensive security** * Solid understanding of VAPT methodologies (web, network, API) * Hands\-on experience with open\-source tools such as Nmap and Burp Suite, plus recon tools (e.g., Amass, ffuf, Nuclei) * Good understanding of the OWASP Top 10 and common vulnerability classes * Experience building automation pipelines or CI/CD\-style workflows for security tasks **Threat intelligence and adversary knowledge** * Conceptual understanding of C2 infrastructure and how it operates * Understanding of ransomware attack lifecycles and behaviors * Awareness of nation\-state threat actors and APT groups * Working knowledge of the MITRE ATT\&CK matrix and mapping TTPs **Nice to Have** * CTF participation, bug bounty experience, or published research or CVEs * Certifications such as CEH, eJPT, OSCP, PNPT, or similar * Experience with Docker, Git, and cloud environments (AWS, Azure, GCP) * Familiarity with Active Directory attack paths and Windows internals **Who You Are** * Curious, with a self\-driven attacker mindset * Comfortable in a fast\-moving product environment * A clear communicator who documents your work * Ethical and responsible when working with offensive capabilities **What We Offer** * Full ownership in a true product development role * Work on cutting\-edge offensive security technology * Learning\-focused culture with room to grow into senior research and engineering roles * Competitive salary **How to Apply** Apply via Indeed with your resume. Please include links to your GitHub, CTF profiles, blog, or any security tools you've built. *Pivot Security is an equal opportunity employer.* Pay: From ₹10,000\.00 per month Benefits: * Work from home Work Location: Hybrid remote in Delhi