Associate - Application Security

Bornsec is hiring a Associate - Application Security in Bengaluru, Karnataka, India. The details below summarise the employer's own listing; applications happen on the original posting, not on GetFirstJob.

What the work involves

• We’re Hiring at Bornsec | Associate
• Application Security (VAPT)
• 📍 Bangalore (Kasturi Nagar) | 🏢 100% Onsite | 💼 Full-time
• Run VAPT on web, mobile (Android/iOS), API and thick client apps
• Pentest AI/LLM applications for prompt injection, data leakage and insecure integrations
• Use AI tools to speed up recon, testing, exploit development and reporting
• Test auth, access control, session handling and business logic
• Find and chain vulnerabilities beyond what scanners catch
• Write clear reports and communicate findings to clients
• Solid grasp of the OWASP Web, API, Mobile and LLM Top 10

What they are looking for

• 🎯 Experience: 2–3 Years
• Hands-on experience with Burp Suite, Postman, Nmap, MobSF, Frida, JADX and APKTool
• Good to Have: Python/Bash scripting, OSCP/OSWE/CEH/eWPT, bug bounty or CTF experience
• CERTIFICATE MUST TO HAVE : OSCP and CEH

Pay and dates

The listing does not state pay. The source page shows a relative posting age rather than an exact posting date; this role was first seen and checked as open on 4 November 2026. The source page showed it as posted “1 day ago” when captured; that is a relative stamp, not an exact date.

How to apply

Apply on the listing where the employer published this role: Associate - Application Security at Bornsec. We found this listing via linkedin.com; it was still open when we checked on 4 November 2026. If the posting has closed or the link fails, the role may have been filled.