{"id":3575155,"url":"https://alion.io/job/astra-security-security-researcher","title":"Security Researcher","company":{"id":3910857,"name":"Astra Security","domain":"astrasecurity.com","url":"https://alion.io/company/astra-security","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":11000,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CVE","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-10-31T17:25:53Z","employer_posted_date":null,"last_verified_at":"2026-10-31T17:25:53Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"About Astra:\nAstra Security is a leader in the penetration testing space, recognized by G2 in the Pentest category. With headquarters in the US & India, Astra is the trusted security partner for leading brands including Muthoot Finance, Loom, CompTIA, NIIT, Goldcast, HackerRank, Sprinto, ITC & more. Its one-of-a-kind continuous pentest platform is trusted by 1,200+ companies across 100+ countries, from fast-growing startups to Fortune 100 giants.\nAstra's autonomous pentest platform pairs AI agents with certified human pentesters to continuously pentest applications and infrastructure at scale. Vulnerabilities are discovered, validated, and chained the way a real attacker would. Beyond pentesting, Astra's suite includes a DAST Scanner, Cloud Vulnerability Scanner, and API Security Platform, giving teams continuous coverage across web apps, cloud environments, and APIs from a single dashboard. With over 18,000 vulnerabilities detected daily, Astra helps customers prevent millions in potential losses while saving thousands of developer hours. Last year alone, Astra uncovered more than 6.8 million vulnerabilities for its customers.\nAstra's research team actively contributes to the OWASP community, including helping shape the OWASP Autonomous Penetration Testing Standard (APTS) and contributing to the OWASP Top 10 for LLM and Generative AI Security Risks. Astra is CREST-accredited, CERT-IN empaneled, and a PCI ASV, reflecting its commitment to the highest standards of security testing.\nWe've been awarded by the President of France Mr. François Hollande at the La French Tech program and Prime Minister of India Shri Narendra Modi at the Global Conference on Cyber Security. Loom, MamaEarth, Muthoot Finance, Canara Robeco, ScripBox etc. are a few of Astra's customers.\n\nRole Overview\nAt Astra Security, we are building the future of cybersecurity, with Autonomous Pentesting - a new experience that helps teams autonomously discover, validate and fix vulnerabilities.\nThis is a high-impact role focused on security research, experimentation, and thought leadership. You'll explore vulnerabilities, attack techniques, and emerging security trends, building on your prior experience in vulnerability research, penetration testing, bug bounty, or CVE research.\nYou'll work closely with the Marketing and Security teams to turn research and security experiments into compelling white papers, technical blogs, and research-led content that builds Astra's credibility within the cybersecurity community. This role is ideal for someone who has a strong foundation in offensive security, enjoys going deep into how vulnerabilities work, and is passionate about sharing their knowledge through technical content and research.\nAt Astra, you will be:\nExploring emerging AI and Generative AI security risks, vulnerabilities, and attack techniques through hands-on security research and experimentation.\nLeveraging prior experience in vulnerability research, penetration testing, bug bounty, or CVE research to identify interesting security findings and research opportunities.\nReproducing vulnerabilities, developing Proofs of Concept, and experimenting with different attack techniques to understand their real-world impact.\nContributing to technical white papers, security research reports, and in-depth research pieces that showcase Astra's security expertise.\nBe a part of videos which explain your research or, in general, are around security topics\nWriting technical blogs and security research articles for Medium and other relevant security communities.\nWorking closely with the Marketing team to turn complex security research and experiments into clear, engaging, and technically accurate content.\nCollaborating with the Security and Engineering teams to validate research findings and identify opportunities to incorporate them into Astra's products and security intelligence.\nKeeping up with emerging vulnerabilities, CVEs, offensive security techniques, AI security research, and developments across the broader cybersecurity ecosystem.\nContributing to Astra's security thought leadership through original research, technical content, and participation in the security community.\n\nRequirements\n2-3 years of experience in cybersecurity, penetration testing, vulnerability research, or a related security domain.\nStrong hands-on understanding of application security and common vulnerability classes.\nDemonstrated curiosity and interest in AI/Generative AI security and emerging AI-driven attack surfaces.\nPrior experience with penetration testing and security research.\nStrong understanding of OWASP methodologies and web application security.\nExperience researching vulnerabilities through CVEs, bug bounty programs, security advisories, or independent research.\nStrong technical writing skills with the ability to explain complex security concepts clearly.\nComfortable conducting security experiments, reproducing vulnerabilities, and building Proofs of Concept.\nComfortable being in front of the camera\nGood communication skills, both written and oral\nActive interest in the cybersecurity community and emerging security research.\n\nGood to have\nPublished CVEs or original vulnerability research.\nActive bug bounty profile with meaningful submissions.\nPublished security research, white papers, or technical blogs.\nAn active Medium profile or contributions to other security publications.\nCTF experience.\nSecurity certifications such as OSCP, OSWE, CREST, or equivalent.\nExperience working with Marketing or Content teams on technical security content.\nExperience presenting security research through conferences, webinars, meetups, or community forums.\n\nWhy Join Astra Security\nYou'll own your work from day one- no micromanaging, just trust and impact.\nHealth Insurance cover for you and your spouse.\nYou'll join a team that's scaling fast but still feels like a close-knit crew- think startup energy with global reach.\nYou'll work closely with security practitioners and the Marketing team, with the freedom to explore and publish meaningful security research.\nDive deep into the constantly evolving world of cybersecurity and contribute to Astra's security thought leadership.\nAnd yes, get ready for some unforgettable workcations.","description_format":"text","description_chars":6258,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"France","iso":"FR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-31T20:09:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.898,"p_room":1,"age_days":7,"expected_fill_days":22,"reasons":["seen:7","velocity","win:early","comp:junior"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/astra-security-security-researcher","json_url":"https://alion.io/job/astra-security-security-researcher.json","meta":{"generated_at":"2026-11-08T09:30:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20630,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3910857},"rest":"https://alion.io/mcp/rest/get_company?id=3910857"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fastra-security-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fastra-security-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fastra-security-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/astra-security-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fastra-security-security-researcher"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3575155}},{"tool":"search_jobs","arguments":{"company":"astrasecurity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3575155},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}