Security Researcher

Mode : In-Person / Office - Mohali (India)

CTC : 12 to 25 LPA (Based on experience and skills)

About SquareX

SquareX is a leading cybersecurity company that focuses on providing robust protection to users while ensuring their productivity remains unhampered. Our mission is to secure the internet for everyone, making our services invaluable to clients worldwide.

We are seeking a Security Researcher with 3–5 years of experience focused on browser security, web threats, and exploit research. The ideal candidate will have a deep understanding of browser internals, strong analytical and investigative skills, and a passion for uncovering and mitigating real-world security vulnerabilities that impact users' safety online.

Responsibilities

• Research and analyze browser-based vulnerabilities, exploits, and attack vectors across major browsers and platforms.
• Investigate and reproduce complex security issues such as sandbox escapes, memory corruption, privilege escalation, and logic flaws in web technologies.
• Study evolving threat landscapes in browser and web security, identifying new patterns of exploitation and abuse.
• Collaborate with product and engineering teams to strengthen browser isolation, threat detection, and mitigation capabilities.
• Design and execute experiments to assess and improve the resilience of browser-based systems against emerging threats.
• Write detailed, technically sound reports describing findings, methodologies, and recommended mitigations.
• Track security advisories, vulnerability disclosures, and emerging research from the broader security community.
• Contribute to improving internal testing and analysis frameworks for browser threat detection.
• Present research and insights internally and occasionally to the wider security community.

Qualifications

Browser architectures and components (rendering engines, JavaScript engines, sandboxing, IPC mechanisms).

Web and browser security fundamentals (XSS, CSRF, CORS, clickjacking, same-origin policy, etc.).

Common vulnerability types and exploitation techniques relevant to browsers.

Familiarity with operating system and process-level security concepts such as sandboxing, isolation, and privilege boundaries.

Skills Required

Ipc Mechanisms, Xss