Back to jobs
M
Hiring companyMindtickle

Verified 4 days ago

Specialist, Information Security and Privacy

Bengaluru, Karnataka Full-time Hybrid

About the role

Mindtickle is scaling its Information Security and Privacy team to ensure enterprise-grade trust is measurable and continuously improving. The Specialist owns external security ratings, bug bounty triage, and vulnerability validation while partnering with Engineering and GTM to maintain a secure posture. This hybrid role is based in Pune or Bengaluru.

What you’ll do

  • Manage Mindtickle's standing on external security rating platforms like SecurityScorecard and UpGuard
  • Validate incoming vulnerability findings across bug bounties, third-party pentests, and customer reports via self-PoC
  • Run the bug bounty program end-to-end, coordinating researcher communications and reward decisions
  • Perform security reviews of products, pull requests, and infrastructure-as-code to catch vulnerabilities early
  • Review AWS account configurations, network architecture, and core protocols to uncover misconfigurations
  • Partner with Engineering and DevOps to strengthen automated security checks within CI/CD pipelines
  • Translate validated findings into actionable Jira tickets with clear exploitation paths and remediation options
  • Track open security issues through to final resolution and validate fixes post-sign-off

What you’ll bring

  • Practical experience in application security, vulnerability management, or security operations
  • Proven capability to independently validate and triage vulnerabilities using tools like Burp Suite, OWASP ZAP, sqlmap, or Nmap
  • Strong command of the OWASP Top 10, including XSS, SQL injection, broken authentication, and access control flaws
  • Solid grasp of networking fundamentals, core protocols (TLS/SSL, OAuth 2.0, SAML), and AWS cloud security configurations
  • Hands-on familiarity with CI/CD tooling, infrastructure-as-code like Terraform, and container security

Skills

Application SecurityVulnerability ManagementBug Bounty ProgramsOWASP Top 10AWS Cloud SecurityCI/CD PipelinesTerraformNetwork Protocols

Benefits

  • Competitive compensation
  • Flexible hybrid work
  • Unlimited paid time off, plus company holidays and all statutory leave entitlements
  • Comprehensive health coverage for you and your family
  • Equity participation