OSWE (WEB-300) is Offensive Security’s white-box web application security certification — the deepest-paid AppSec credential in Kolkata’s IT-services delivery, BFSI back-office, and regional GCC bench markets. TCS Kolkata, Wipro Salt Lake, Cognizant Sector V, Capgemini, IBM Kolkata, HDFC, ICICI, Standard Chartered Kolkata, PwC AC, EY GDS, ITC Infotech, and the West Bengal IT Department’s secure-SDLC initiatives hire OSWE-certified engineers into INR 22-35 LPA roles. Macksofy is the EC-Council-accredited alternative to the legacy ICSS cyber-training presence in Kolkata. This page covers Macksofy’s 12-week mentored OSWE bootcamp delivered as live online cohorts and as monthly Saturday workshops at Smartworks Salt Lake Sector V. Macksofy is not an Offensive Security Authorized Training Partner; this is an independent mentor-led prep program for the OffSec certification exam.
Course Overview — OSWE (WEB-300) in Kolkata
Kolkata’s demand centres on the Sector V IT hub, extensive PSU and BFSI back-office operations, and the region’s manufacturing and government bodies. OSWE is the benchmark white-box web-exploitation certification — proof you can read source code and chain real application vulnerabilities into working exploits — the exact skill these AppSec and product-security teams struggle to hire. OSWE (WEB-300) is awarded by OffSec after a 48-hour practical exam; Macksofy delivers it as an independent exam-prep bootcamp with source-code-review labs and Kolkata-context case studies for application-security engineers, web pentesters and bug-bounty hunters.
Why Kolkata cybersecurity professionals need OSWE
Kolkata’s IT-services hub — TCS Kolkata, Wipro Salt Lake, Cognizant Sector V, Capgemini, IBM Kolkata, HCL — delivers AppSec audits for global clients. OSWE is the standard filter for senior delivery roles handling RBI Master Direction’s secure-SDLC audits, SEBI CSCRF third-party AppSec reviews, and global PCI-DSS / ISO 27001 audit cycles. The regional GCC bench (PwC AC Kolkata, EY GDS Kolkata, Capgemini) also hires OSWE-certified engineers into client-delivery code-review functions.
The BFSI back-office cluster — HDFC, ICICI, SBI regional cyber ops, Standard Chartered Kolkata, Axis Bank — runs source-code-review functions for production banking codebases. OSWE-trained engineers cross-skilled into RBI Master Direction compliance and CERT-In incident-response coding patterns command salary premiums in this cluster.
Pharma, FMCG, and manufacturing AppSec (ITC Limited, ITC Infotech, Emami, Linde India, Britannia) staff smaller but consistent AppSec functions. The WB GovTech mandate via the State Data Centre Kolkata and e-Bengal initiatives creates additional secure-SDLC review demand for state-government digital platforms.
OSWE is harder than OSCP from a code-reading perspective: the 48-hour exam requires writing a working exploit chain against custom application source code, often involving multiple bypasses and a final unauthenticated RCE. Pass rate globally is around 25%; Macksofy alumni achieve significantly higher first-attempt pass through mentored code-review practice, weekly white-box challenges, and instructor-supervised mock exams. For candidates already holding OSCP, OSWE adds a clear 50-80% salary premium at the same experience level.
OSWE (WEB-300) Curriculum for Kolkata Cohorts
Kolkata cohorts map the OSWE syllabus onto the Sector V IT, PSU-BFSI and government work local teams do. The full WEB-300 syllabus — source-code review, authentication and access-control bypasses, injection and deserialisation, and building chained exploits — is identical in every Macksofy Kolkata cohort and maintained on our OSWE (WEB-300) course page, so the Kolkata schedule always reflects OffSec’s current exam.
Where Our Kolkata OSWE Alumni Work
OSWE-certified engineers from Macksofy alumni place across Kolkata’s deepest AppSec hiring teams:
- TCS Kolkata, Wipro Salt Lake, Cognizant Sector V, Capgemini Kolkata, IBM Kolkata, HCL Technologies Kolkata — IT services AppSec delivery
- HDFC Kolkata, ICICI Bank Kolkata, Standard Chartered Kolkata, Axis Bank Kolkata — BFSI back-office AppSec engineering
- PwC AC Kolkata, EY GDS Kolkata, Deloitte Kolkata, KPMG Kolkata — Big-4 cyber AppSec consulting delivery
- ITC Infotech, ITC Limited, Emami, Linde India, Britannia — pharma, FMCG, manufacturing AppSec teams
- LTIMindtree Kolkata, Coforge Kolkata, Mindteck, Tech Mahindra Kolkata — IT services AppSec engineering
- Cyber-product engineering — Lucideus / SAFE Security, Sequretek, Quick Heal Kolkata R&D pool
Mode & Delivery in Kolkata
Kolkata candidates from Sector V and PSU-BFSI back-offices mainly take the online live cohort, with classroom weekends in the Salt Lake corridor. Classroom-tier cohorts run their in-person labs at Macksofy Trainings Kolkata (Smartworks Salt Lake Sector V), Kolkata. Both formats include the official WEB-300 course materials, hands-on code-review labs and full OSWE exam preparation.
12-Week OSWE Prep Schedule — Kolkata
Kolkata learners usually run the twelve weeks around Sector V IT-services and PSU schedules. The twelve weeks build from source-code-review fundamentals through authentication, injection and deserialisation attacks to full exploit chains and a mock 48-hour exam; Kolkata candidates can see the week-by-week plan on our OSWE course page.
2026 Batch Schedule & Fees
Next online cohort starts July 13, 2026 (12-week duration; ends October 05, 2026). First Smartworks Salt Lake, Kolkata Saturday workshop runs July 20, 2026 with subsequent monthly workshops through October 12, 2026. Both cohort dates feed our EducationEvent schedule that Google surfaces in Course-listing rich results.
- Online live cohort — INR 95,000 (12-week format). Includes courseware, mentored lab time, and exam preparation.
- Classroom-tier cohort — INR 110,500 (online + monthly all-day Saturday workshop at Macksofy Trainings Kolkata (Smartworks Salt Lake Sector V), Kolkata). Includes everything above plus in-person mentor proximity. Tier-3 pricing — 15% lower than Mumbai baseline.
- OffSec / EC-Council exam fees — paid directly by candidate to the certifying body. Macksofy provides exam vouchers where applicable (CEH v13 voucher included in our pricing).
- EMI — 0% EMI on 3/6/9-month tenures across HDFC, ICICI, Axis, SBI, Kotak credit cards.
Instructor & Mentor — Kolkata
Kolkata cohorts are supported by trainers with PSU-BFSI and IT-services delivery experience in the east. Macksofy Kolkata OSWE cohorts are led by OSWE/OSCP-holding instructors with real application-security delivery experience. See Macksofy Expert Trainers for credentials.
Cybersecurity careers & pay in Kolkata — 2026 outlook
Kolkata’s IT-services majors (TCS, Cognizant, Wipro at Salt Lake Sector V), BFSI back-office operations and large PSU presence sustain steady audit-, compliance- and pentest-driven security hiring across eastern India.
| Offensive-security role (Kolkata) | 0-2 yrs | 3-5 yrs | 6+ yrs (lead) |
|---|---|---|---|
| Associate Penetration Tester | ₹4.5 LPA | ₹10 LPA | ₹20 LPA |
| Web App Penetration Tester (OSWE) | ₹4.5 – 8 LPA | ₹10 – 17 LPA | ₹20 – 34 LPA |
| Lead / Principal Offensive Security | — | ₹17+ LPA | ₹34+ LPA |
OSWE exam logistics for Kolkata candidates
The OSWE (WEB-300) exam is a 48-hour remote-proctored practical taken online from anywhere in Kolkata — you build and document working exploits against live web targets, with no test-centre visit needed. Macksofy’s IST-aligned cohorts suit Salt Lake Sector V or New Town / Rajarhat-based engineers preparing alongside a job.
Kolkata’s offensive-security community
The null Kolkata chapter and local OWASP / college CTF activity anchor the eastern-India security community, with Sector V providing a dense employer cluster.
Frequently Asked Questions — OSWE Training in Kolkata
Which Kolkata employers actively hire OSWE-certified engineers?
Kolkata-active OSWE hirers: TCS Kolkata, Wipro Salt Lake, Cognizant Sector V, Capgemini, IBM Kolkata, HCL (IT services AppSec delivery); HDFC, ICICI, Standard Chartered Kolkata, Axis (BFSI back-office AppSec); PwC AC Kolkata, EY GDS Kolkata, Deloitte Kolkata, KPMG Kolkata (Big-4 AppSec consulting); ITC Infotech, ITC Limited, Emami, Linde India (FMCG / pharma AppSec). Salary band 22-35 LPA at 4-7 years post-OSWE.
Is OSWE worth it after OSCP for a Kolkata fintech / GCC AppSec career?
Yes — for Kolkata AppSec roles, OSWE adds a clear 50-80% salary premium over OSCP-only at the same experience level. The cert specifically validates white-box code-review skills that black-box pentest certs don’t cover. Kolkata-active OSWE hirers: TCS Kolkata, Wipro Salt Lake, Cognizant Sector V, Capgemini, IBM Kolkata, HCL (IT services AppSec delivery); HDFC, ICICI, Standard Chartered Kolkata, Axis (BFSI back-office AppSec); PwC AC Kolkata, EY GDS Kolkata, Deloitte Kolkata, KPMG Kolkata (Big-4 AppSec consulting); ITC Infotech, ITC Limited, Emami, Linde India (FMCG / pharma AppSec). Salary band 22-35 LPA at 4-7 years post-OSWE.
How does the classroom OSWE workshop work in Kolkata?
For Kolkata classroom-tier learners, the 12-week cohort runs online live (evening sessions + Saturday code-review labs) plus an in-person all-day Saturday workshop once every four weeks at our local venue, focused on the toughest white-box modules — chained deserialization, framework quirks, type juggling and race conditions. Online-only candidates keep full mentor access; classroom-tier pays a slightly higher tier.
How much does OSWE training cost in 2026?
The Macksofy OSWE bootcamp is INR 95,000 for the online live cohort and INR 117,000 for the classroom-tier batch for Kolkata learners. Pricing is exclusive of the OffSec OSWE exam fee (USD 1,749, paid directly to Offensive Security, includes a 90-day lab subscription). EMI is available across HDFC / ICICI / Axis / SBI / Kotak cards — confirm current figures at enrolment.
Is Macksofy Trainings Kolkata (Smartworks Salt Lake Sector V) accessible from across Kolkata?
Yes — the venue is reached via Salt Lake Stadium Metro (Green Line) / Karunamoyee Metro (Yellow Line), with primary catchment from Salt Lake, Sector V, New Town, Rajarhat, Bidhannagar, Park Street, Esplanade, Howrah, Behala, Dum Dum, Garia, Tollygunge. Workshop days run 10am-5pm on Saturdays. Salt Lake Sector V is Kolkata’s primary IT and BFSI cluster — accessible from New Town / Rajarhat (10-20 min), central Kolkata / Park Street / Esplanade (30 min via Green Line metro), Howrah (40 min), and Behala / Tollygunge (45 min).
Do I need OSCP before attempting OSWE?
OSCP is not a formal prerequisite — OffSec doesn’t enforce it — but for Kolkata candidates we recommend it (or a strong dev / source-code-review background) first, since WEB-300 assumes comfort with HTTP, web payloads and exploitation flow. About 80% of Macksofy OSWE candidates also hold OSCP.
Does Macksofy offer EMI for the OSWE bootcamp fee?
Yes — for Kolkata learners we offer 0% EMI across major Indian credit cards (HDFC, ICICI, Axis, SBI, Kotak) over 3, 6 or 9 months; the classroom-tier batch at INR 117,000 works out to roughly INR 13,000/month on a 9-month plan.
How is OSWE different from OSCP?
OSCP is black-box penetration testing (find a way in given an IP and goal); OSWE is white-box application security (find a way in given the source code). Kolkata OSWE candidates spend far more time reading framework code (Java Spring, Node.js, Django/Flask, .NET) and writing Python exploit scripts, and the OSWE exam is 48 hours versus OSCP’s 24.
Related Macksofy Courses
- Full OSWE (WEB-300) curriculum — module-by-module, instructor profiles, certification roadmap
- OSWE Training in Mumbai — sister city page (BFSI capital, BKC classroom)
- Cybersecurity Training in Kolkata (overview) — IT-services + BFSI back-office + Big-4 + WB GovTech employer landscape, salary bands, cert-to-role mapping
- All Macksofy course catalog — 70+ cybersecurity certifications across offensive + defensive + cloud + GRC tracks
OSWE (WEB-300) training in Kolkata: what makes Macksofy different
Kolkata’s demand centres on the Sector V IT hub, extensive PSU and BFSI back-office operations, and the region’s manufacturing and government bodies. Across those sectors the scarce skill is the same — people who can turn code-level flaws into working web exploits. OSWE validates that you can audit an application’s source and turn subtle logic and injection flaws into working exploit chains — exactly what product-security teams here need. From career-changers to professionals levelling up to a product-security engineer role, the right OSWE preparation turns study time into offers.
Kolkata candidates from Sector V and PSU-BFSI back-offices mainly take the online live cohort, with classroom weekends in the Salt Lake corridor. Learners here usually run the twelve weeks around Sector V IT-services and PSU schedules. With delivery reaching Sector V and the Salt Lake corridor, you get the same OSWE depth as a metro cohort while staying in Kolkata.
OSWE (WEB-300) in Kolkata: what learners ask
Who hires OSWE-certified professionals in Kolkata?
Expect interest from Kolkata’s the Sector V IT hub, extensive PSU and BFSI back-office operations and government bodies; across these, OSWE is a familiar and respected credential for application-security, product-security and bug-bounty functions.
Is OSWE training in Kolkata available in person or only online?
Both. Most Kolkata learners take the live-online cohort, with optional in-person weekend labs around Sector V and the Salt Lake corridor — the same syllabus and OSWE exam preparation either way.
Is OSWE worth it for pay in Kolkata?
White-box web-security roles sit among Kolkata’s more lucrative IT paths; rather than quote a single figure, we point candidates to the current bands in our highest-paying cybersecurity jobs guide.
Ready to go deeper? Open the OSWE (WEB-300) course page or view our other training locations across India.