Associate Director - Delivery Security Services

Mitigata™ - Full-Stack Cyber Resilience; Bengaluru; On-site; INR 3,800,000 - 7,000,000; Full time

Job summary

Mitigata – Full-Stack Cyber Resilience in Bengaluru seeks an Associate Director of Delivery Security Services to lead delivery for VAPT, red teaming, application and cloud security assessments, and incident response, guiding a team of consultants while ensuring our methodology and reporting align with client and regulator expectations.

You will own engagements from kickoff to final report and retest, hire and develop testers, define testing methodology and QA standards, review findings before

Qualifications

• 10+ years in offensive security or DFIR.
• 4+ years leading delivery teams.
• Hands-on depth across web, mobile, API, network, and cloud security testing.
• Experience delivering regulated engagements for BFSI/enterprise with audit-grade reporting.
• Strong people leadership and quality control.
• Sound judgement on safe testing, confidentiality, and evidence handling.

Responsibilities

• Own delivery of offensive security and DFIR engagements from kickoff through final report and retest.
• Lead, hire, and develop testers and incident responders (scheduling, utilisation, skill growth).
• Define testing methodology, QA, and reporting standards.
• Review critical findings before release and present to client leadership.
• Oversee IR engagements including coordination with client teams, legal counsel, and insurance claims team.
• Manage tooling, labs, and safe-testing practices; track delivery metrics like on-time delivery, report quality, retest closure, and client satisfaction.

Skills

Offensive security

DFIR

Team leadership

Web/Mobile/API security

Network security

Cloud security

Audit-grade reporting

Regulated engagements

Job description

We're Hiring | Associate Director – Delivery Security Services

At @Mitigata, you'll lead delivery for our security services practice — VAPT, red teaming, application and cloud security assessments, and incident response — running a team of consultants and keeping our methodology and reporting at a standard clients and regulators trust.

About the role:

You’ll own delivery of offensive security and DFIR engagements from kickoff through final report and retest; lead, hire, and develop testers and incident responders (scheduling, utilisation, skill growth); define testing methodology, QA, and reporting standards; review critical findings before release and present to client leadership; oversee IR engagements including coordination with client teams, legal counsel, and our insurance claims team; manage tooling, labs, and safe-testing practices; and track delivery metrics like on‑time delivery, report quality, retest closure, and client satisfaction.

What we’re looking for:

• 10+ years in offensive security or DFIR, with 4+ years leading delivery teams
• Hands‑on depth across web, mobile, API, network, and cloud security testing
• Experience delivering regulated engagements for BFSI/enterprise with audit‑grade reporting
• Strong people leadership and quality control
• Sound judgement on safe testing, confidentiality, and evidence handling

Nice to have:

• Experience at a CERT‑In empanelled organisation
• Red teaming / adversary emulation
• IR experience in the context of cyber insurance claims