Careers at OPSEC Labs

We keep the team small and the work real. Defend. Protect. React.

If you are sharp, curious, and want to do security that outlasts the audit cycle, one of these might fit. We hire for craft and character, then give people the room to grow into it.

How hiring works 1 Apply via the role's form 2 Two short online rounds: general, then technical and aptitude 3 Offer

Currently hiring

Two roles open. Hybrid, Bengaluru.

Cyber Security Intern

Internship Current students only 3-6 months Hybrid, Bengaluru Paid

Hands-on offensive and defensive work from week one, across web, API, network, cloud, and hardware, IoT and EV. You will also help build our local LLM tooling to speed up real assessments. Mentored closely, with a path to a full-time Junior Cybersecurity Associate role. This is a student internship for those still enrolled and entering their 7th semester, not for candidates who have already completed their degree.

  • Currently enrolled and entering your 7th semester (B.E. / B.Tech / BCA in CS, IS, ECE, Cyber or related)
  • Comfortable in Linux, scripting in Python or Bash, and building with AI coding assistants
  • Active on TryHackMe, HackTheBox or PentesterLab (share your profile and rank)
Apply ~8 min form

Cyber Security Associate

Full-time Bengaluru Offensive + Defensive

A broad, hands-on security role. Depending on the engagement you will work across the full spectrum: vulnerability assessments and penetration testing (VAPT), blue-team and security operations, security control implementations, and security architecture and design, with close guidance from an experienced project manager. You scope the work, do it, and produce the assessments, configurations and designs that clients actually put into production. AI-assisted and local LLM tooling helps you move faster on the real work.

  • 1 to 3 years across security testing, defensive operations, or security implementation (strong early-career candidates with proof welcome)
  • Comfortable on both sides: offensive tooling (Burp Suite, OWASP ZAP, Nessus, OpenVAS/Greenbone, Nuclei) and defensive and cloud work (log analysis and SIEM, hardening, CSPM such as Prowler / ScoutSuite / Wiz)
  • Exposure to security architecture, control implementation and frameworks (ISO 27001, OWASP, CIS), plus comfort with AI dev tools (Claude Code, Codex) and no-code / low-code app testing
  • At least one cloud platform (AWS / GCP / Azure), Python or Bash scripting, and clear, risk-rated reporting
Apply ~10-12 min form

GRC Associate

No current opening Full-time Hybrid, Bengaluru Governance, Risk & Compliance

Delivery of governance, risk and compliance work: ISO/IEC 27001:2022, SOC 2 and PCI DSS readiness, alongside DPDPA and GDPR programmes. From gap assessments and controls implementation to audit coordination and the documentation clients actually use, not paper that gathers dust. We are not actively hiring for this role right now, but we keep good profiles on file.

  • 1 to 3 years in GRC, audit or compliance (a strong fresher with the right grounding will be considered)
  • Working knowledge of ISO/IEC 27001:2022 Annex A, and DPDPA or GDPR obligations
  • Clear writing and comfort working directly with client teams
Not hiring right now Write to us to be kept on file

Don't see your role?

We are always glad to hear from sharp, curious people. Tell us what you do and why security.

Write to us