Staff Cybersecurity Engineer - Pen Testing

BMC Software; Pune District; On-site; INR 1,800,000 - 2,435,000; Full time

Job summary

BMC Software is seeking a Staff Specialist Cybersecurity Engineer to identify, assess, and mitigate cybersecurity risks across our infrastructure, applications, cloud environments, and attack surface. The role blends hands-on penetration testing with threat management responsibilities to protect enterprise assets.

You will perform infrastructure and application security assessments, document findings with actionable remediation guidance, and collaborate with engineering teams to validate fixes.

Qualifications

• Hands-on infrastructure and application penetration testing experience.
• Strong offensive security skills with practical risk translation.
• Experience with autonomous and LLM-assisted testing is desirable.

Responsibilities

• Perform infrastructure penetration testing across internal, external, cloud, and hybrid environments.
• Conduct web application and API security assessments and threat simulations.
• Execute authenticated and unauthenticated security assessments of OS, databases, and networks.
• Validate exploitability and assess real-world business risk.
• Develop detailed technical reports and executive summaries with remediation steps.
• Collaborate with support and infrastructure teams to validate and retest fixes.

Skills

Penetration testing

Threat analysis

Vulnerability assessment

Security reporting

LLM-assisted testing

Job description

BMC empowers nearly 80% of the Forbes Global 100 to accelerate business value, faster than humanly possible. Our industry-leading portfolio unlocks human and machine potential to drive business growth, innovation, and sustainable success. BMC does this in a simple and optimized way by connecting people, systems, and data that power the worlds largest organizations so they can seize a competitive advantage.

Our IST (Information Services and Technology) department provides all the required technology and operational support services to run our business here in BMC! We have over 200 servers on premises to support production, disaster recovery, databases, applications and over 1000 servers in Lab environment. IST is transformational not only for BMC but also for the customer experience, because we give a 360 degrees view to the customer about the products they should know, opportunities in the pipeline, and any service issues outstanding with the customer. We use cutting-edge technologies to manage BMC''s infrastructure and showcase it to the customers program is called BMC on BMC!

The Staff Specialist Cybersecurity Engineer is responsible for identifying, assessing, and helping mitigate cybersecurity risks across the organization''s infrastructure, applications, cloud environments, and external attack surface. This role combines hands-on penetration testing with broader threat management responsibilities, vulnerability risk assessment, attack surface monitoring, threat intelligence analysis, and security validation activities.

The ideal candidate possesses strong offensive security skills, practical experience conducting infrastructure and application penetration tests, and the ability to translate technical findings into actionable risk reduction strategies for engineering and business stakeholders. Experience with autonomous and LLM assisted penetration testing is desired.

Key Responsibilities

Penetration Testing and Security Assessments

Perform infrastructure penetration testing across internal, external, cloud, and hybrid environments.

• Conduct web application and API security assessments.
• Perform adversary emulation and attack path validation to identify exploitable weaknesses.
• Execute authenticated and unauthenticated security assessments of operating systems, databases, network devices, and security technologies.
• Validate vulnerability exploitability and determine real-world business risk.
• Develop detailed technical reports and executive summaries documenting findings, attack paths, and remediation recommendations.
• Partner with support and infrastructure teams to validate remediation efforts and conduct retesting activities.

Threat Management

Identify, assess, and prioritize emerging threats that may impact the organization.

• Analyze threat intelligence from commercial, open-source, and industry sources.
• Support continuous attack surface management initiatives to identify exposed assets and security risks.
• Conduct risk-based analysis of vulnerabilities and provide prioritization guidance based on exploitability and business impact.
• Assist in developing and maintaining threat management processes, standards, and reporting.

Our commitment to you!

BMCs culture is built around its people. We have 6000+ brilliant minds working together across the globe. You wont be known just by your employee number, but for your true authentic self. BMC lets you be YOU!

If after reading the above, Youre unsure if you meet the qualifications of this role but are deeply excited about BMC and this team, we still encourage you to apply! We want to attract talents from diverse backgrounds and experience to ensure we face the world together with the best ideas!

BMC is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender,gender expression,gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status as a protected veteran.If you need a reasonable accommodation for any part of the application and hiring process, visit the accommodation request page.

At BMC we believe in pay transparency and have set the midpoint of the salary band for this role at 2,117,800 INR. Actual salaries depend on a wide range of factors that are considered in making compensation decisions, including but not limited to skill sets; experience and training, licensure, and certifications; and other business and organizational needs.

The salary listed is just one component of BMC''s employee compensation package. Other rewards may include a variable plan and country specific benefits.

We are committed to ensuring that our employees are paid fairly and equitably, and that we are transparent about our compensation practices.