Mindtickle

Overview

We are scaling our Information Security and Privacy team in Pune to ensure our enterprise-grade trust is measurable and continuously improving. You will own external security ratings, bug bounty triage, and vulnerability validation through self-proof-of-concepts, partnering directly with Engineering and GTM to maintain an accurate security posture.

About Mindtickle

Mindtickle is a market-leading revenue platform that helps organizations scale and ensure enterprise-grade trust, with a culture centered on acting as a founder, delighting customers, and growing together.

Requirements & Eligibility

• Practical experience in application security, vulnerability management, security operations, or a security-adjacent technical role
• Proven capability to independently validate and triage vulnerability findings using tools like Burp Suite, OWASP ZAP, sqlmap, or Nmap
• Strong, hands-on command of the OWASP Top 10, with deep depth in XSS, SQL injection, broken authentication, and access control flaws
• Solid grasp of networking fundamentals, core protocols (TLS/SSL, OAuth 2.0, SAML), and AWS cloud security configurations
• Hands-on familiarity with CI/CD tooling, infrastructure-as-code like Terraform, and container security
• Strong written communication skills to articulate technical security risks clearly to both engineers and external stakeholders

Key Responsibilities

• Manage Mindtickle's standing on external security rating platforms like SecurityScorecard and UpGuard
• Validate incoming vulnerability findings across bug bounties, third-party pentests, and customer reports
• Run the bug bounty program end-to-end, coordinating researcher communications and reward decisions
• Perform security reviews of products, pull requests, and infrastructure-as-code
• Review AWS account configurations, network architecture, and core protocols
• Partner with Engineering and DevOps to strengthen automated security checks like SAST, DAST, and container scanning
• Translate validated findings into actionable Jira tickets with clear exploitation paths
• Track open security issues through to final resolution and validate fixes post-sign-off