Jobs at Kratikal

Perform application security testing and penetration testing across web, mobile, thick-client, and API applications. Conduct SAST, secure code reviews, vulnerability analysis, risk prioritization, and remediation validation. Prepare technical and executive reports, communicate findings to stakeholders, and stay current with application security threats and techniques.

Assist with web, mobile, thick-client, web service, and API application security testing and penetration testing under senior guidance. Document vulnerabilities, produce technical reports, support customer remediation, validate fixes, and conduct retesting. The role requires foundational OWASP Top 10 knowledge, Burp Suite experience, familiarity with HTTP/HTTPS, REST APIs, authentication, and session management, plus strong communication skills.

Perform application security and penetration testing across web, mobile, thick-client, and API applications. Conduct SAST and manual secure code reviews, analyze and prioritize vulnerabilities, prepare technical and executive reports, communicate findings, recommend secure coding practices, and validate remediation. The role requires hands-on exploitation expertise, knowledge of OWASP risks and authentication mechanisms, and collaboration with technical and non-technical stakeholders.

Perform application security and penetration testing across web, mobile, thick-client, and API applications. Conduct SAST, secure code reviews, vulnerability analysis, and remediation validation. Assess authentication, authorization, business logic, and common vulnerabilities including SQL injection, XSS, IDOR, SSRF, and CSRF. Prepare technical and executive reports, collaborate with stakeholders, and communicate secure coding recommendations.

Assists with web, mobile, thick-client, API, and web-service application security testing and penetration testing. Documents vulnerabilities, prepares technical reports, supports customer remediation, validates fixes, and performs retesting. The role requires foundational knowledge of OWASP Top 10 and common web vulnerabilities, hands-on Burp Suite experience, familiarity with HTTP/HTTPS, REST APIs, authentication, and session management, plus strong communication skills.

Assist with web, mobile, thick-client, web-service, and API application security testing and penetration testing. Document vulnerabilities, produce technical reports, support remediation, validate fixes, and conduct retesting under senior guidance. The role requires foundational knowledge of OWASP Top 10 and common web vulnerabilities, hands-on Burp Suite experience, familiarity with HTTP/HTTPS, REST APIs, authentication, and session management, plus strong communication skills.

Develop security and compliance strategies, manage IT audit recommendations, and ensure compliance with ISO 27001, SOC 2, GDPR, HIPAA, and related regulations. Conduct internal audits, third-party risk assessments, vulnerability scans, and penetration tests. Advise on cloud and network security, support remote-user infrastructure, manage compliance projects, and coordinate with clients, auditors, and internal stakeholders.

Supports business development through networking, follow-up calls, client presentations, proposals, customer relationship management, and promotion of additional services. Assists with sales coordination, purchase orders, invoices, and payment follow-ups while learning under manager guidance.

Lead strategy, roadmap, and delivery for cybersecurity SaaS products. Define requirements, prioritize backlog, analyze usage metrics, collaborate with engineering/QA/DevOps, drive AI and GRC/email gateway initiatives, manage product launches, and mentor product team members.

Lead and scale a Red Team/offensive security practice while executing advanced adversary-emulation and network penetration engagements. Responsibilities include team leadership, methodology and quality assurance, C2 and payload development, social engineering and physical red team operations, wireless and AD attack techniques, OSINT/dark-web reconnaissance, cloud offensive testing (preferred), and producing detailed reports and purple-team collaboration.

Support business development by identifying leads, making follow-up calls, preparing client presentations and proposals, maintaining customer relationships, and assisting the manager with sales activities such as POs, invoices, and payment follow-ups.

Support compliance program activities including creating and maintaining policies and ISMS documentation, assisting ISO 27001/SOC2 audit tasks, managing evidence repositories, compiling compliance reports, conducting regulatory research, and improving documentation and processes under senior supervision.

Design, build, and maintain scalable backend systems and REST APIs using Node.js and TypeScript. Develop secure, high-performance microservices, integrate databases and cloud services, troubleshoot production issues, support CI/CD, conduct code reviews, collaborate across teams, and leverage AI-assisted tools to improve development productivity.