Build the parts that don't exist yet.
Shadow Security is early. That means more ownership, less structure, and work that has not been specified by somebody else first.
One open role.
- Suraksha LabsEarly access soon
Security Lab QA Engineer
Break our vulnerability labs before learners do, so every one works exactly as intended.
- Internship
- Remote
About the role
Hands-on QA for our web security labs. You make sure each lab is correct, exploitable as intended, clear to solve and free of unintended paths. You are the last check before a lab ships.
What you will do
- Exploit every lab by hand to confirm the intended vulnerability works end to end.
- Check that success conditions, hints and write-ups are accurate.
- Hunt edge cases: broken setups, race conditions, unintended exploit paths.
- File clear, reproducible bugs with severity.
- Keep labs current and add automated regression checks.
- Help authors calibrate difficulty and design new scenarios.
What will help
- Manual web exploitation and Burp Suite
- Running and debugging apps locally, including Docker
- Scripting in Python, Bash or JavaScript
- Labs or CTFs you have solved yourself
- Not this role, but strong at something we will clearly need? Write to us anyway and tell us what you have built. info@shadowsecurity.in
What this is and isn't.
It is early. Two of our four products are still plans. You would be helping decide what they are, not implementing a finished spec.
It is broad. We are building a learning platform, a disclosure platform, a governance product and a certification programme. Narrow specialists will find the surface area uncomfortable.
Clarity is part of the job. Almost everything we build has to be understood by somebody outside the team. If you can't explain your work simply, you'll struggle here.