Specialist, Information Security & Privacy

Job description

About Mindtickle Mindtickle is the leading AI-powered revenue enablement platform, helping sales teams learn faster, practice smarter, and perform at their best. We bring together onboarding, training, coaching, content, digital sales rooms, conversation intelligence, and AI role plays into one platform so revenue teams have everything they need to build winning sellers. Global companies, like Fortune 500 organizations, trust Mindtickle to support their revenue teams. We've also been recognized by customers and industry analysts. G2 has ranked us the #1 Sales Training & Onboarding platform for 28 consecutive quarters, and Forrester has recognized Mindtickle as a Leader in revenue enablement. Mindtickle was also recognized as AI-Based Sales Solution of the Year by the 2025 AI Breakthrough Awards and has received Stevie Awards for Technology Innovation and Customer Support Excellence. At Mindtickle, we're helping companies create high-performing revenue teams, and we're looking for people who want to help shape what's next. The Opportunity We are scaling our Information Security and Privacy team in Pune to ensure our enterprise-grade trust is measurable and continuously improving. You will own external security ratings, bug bounty triage, and vulnerability validation through self-proof-of-concepts, partnering directly with Engineering and GTM to maintain an accurate security posture. If you want a role where your technical depth directly secures a market-leading revenue platform from day one, this is i What you'll drive Manage Mindtickle's standing on external security rating platforms like SecurityScorecard and UpGuard by tracking scores, analyzing flagged issues, and updating the GTM Score Deck. Validate incoming vulnerability findings across bug bounties, third-party pentests, and customer reports by reproducing issues via self-PoC and assessing real-world impact. Run the bug bounty program end-to-end, coordinating researcher communications, reward decisions, and cross-functional payouts. Perform security reviews of products, pull requests, and infrastructure-as-code to catch vulnerabilities early in development. Review AWS account configurations, network architecture, and core protocols to uncover misconfigurations and mitigate real-world risks. Partner with Engineering and DevOps to strengthen automated security checks like SAST, DAST, and container scanning within CI/CD pipelines. Translate validated findings into actionable Jira tickets with clear exploitation paths and remediation options for development teams. Track open security issues through to final resolution and validate fixes post-sign-off. ✦ How You'll Work with AI Use AI-powered tools (e.g. Cursor, Claude Code) to support security reviews and analyze codebases more efficiently Leverage AI assistants to parse complex vulnerability scan outputs and accelerate preliminary triage workflows. Prompt-engineer AI workflows to automate repetitive security checks and streamline internal tracking documentation What You Bring: Practical experience in application security, vulnerability management, security operations, or a security-adjacent technical role. Proven capability to independently validate and triage vulnerability findings using tools like Burp Suite, OWASP ZAP, sqlmap, or Nmap. Strong, hands-on command of the OWASP Top 10, with deep depth in XSS, SQL injection, broken authentication, and access control flaws. Solid grasp of networking fundamentals, core protocols (TLS/SSL, OAuth 2.0, SAML), and AWS cloud security configurations. Hands-on familiarity with CI/CD tooling, infrastructure-as-code like Terraform, and container security. Strong written communication skills to articulate technical security risks clearly to both engineers and external stakeholders Nice to have : Prior experience running or supporting a bug bounty program or handling reward processes would be an advantage. Professional security certifications such as OSCP, CEH, CISA, CISSP, or AWS Certified Security (Specialty) are a plus. •Exposure to CSPM tooling or Google Cloud Platform is nice to have What we offer: Competitive compensation Flexible hybrid work - we care about output Unlimited paid time off, plus company holidays and all statutory leave entitlements Comprehensive health coverage for you and your family Wellness support - physical and mental health programmes Learning & development access, including Mindtickle's own platform. Equity participation If based in our India offices (Pune / Bangalore): Fresh meals from our live kitchen - breakfast, lunch, and dinner covered Unlimited tea, coffee, snacks, and beverages throughout the day Spaces to focus, collaborate, or decompress between sessions We mark the moments that matter - birthdays, work anniversaries, and the wins worth celebrating Our Culture and Values We hire builders, people who move fast, learn from failure, and use AI as a default part of how they work. Our values, Delight Your Customers, Act as a Founder, and Better Together, aren't wall decor. They're how decisions get made here. Growth at Mindtickle looks like owning more, not just doing more. Your scope will outgrow your job title if you want it to. You'll work alongside people who've scaled revenue tech globally, get direct feedback from leaders invested in your development, and take on challenges before you feel ready because that's how the best growth happens. Our team spans 5+ countries, backgrounds, and perspectives. We believe the best products are built by people who bring different ways of seeing the same problem - and everyone has a seat at that table. Learn more: Culture • Product • Customers • Recognition Follow us: LinkedIn • Twitter / X • YouTube We hire for potential. Apply even if your experience doesn't match every requirement; your skills, perspective, and drive matter here. At Mindtickle, you can be yourself, build your career, and do the best work of your life alongside people who genuinely want to see you succeed. We believe the best products are built by teams with different backgrounds, experiences, and ways of seeing the world. We welcome every unique identity, and we mean that. Equal Opportunity Statement Mindtickle is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law. Your Right to Work: In compliance with applicable laws, all persons hired will be required to verify identity and eligibility to work in the respective work locations and to complete the required employment eligibility verification document form upon hire. About Mindtickle Mindtickle is the leading AI-powered revenue enablement platform, helping sales teams learn faster, practice smarter, and perform at their best. We bring together onboarding, training, coaching, content, digital sales rooms, conversation intelligence, and AI role plays into one platform so revenue teams have everything they need to build winning sellers. Global companies, like Fortune 500 organizations, trust Mindtickle to support their revenue teams. We've also been recognized by customers and industry analysts. G2 has ranked us the #1 Sales Training & Onboarding platform for 28 consecutive quarters, and Forrester has recognized Mindtickle as a Leader in revenue enablement. Mindtickle was also recognized as AI-Based Sales Solution of the Year by the 2025 AI Breakthrough Awards and has received Stevie Awards for Technology Innovation and Customer Support Excellence. At Mindtickle, we're helping companies create high-performing revenue teams, and we're looking for people who want to help shape what's next. The Opportunity We are scaling our Information Security and Privacy team in Pune to ensure our enterprise-grade trust is measurable and continuously improving. You will own external security ratings, bug bounty triage, and vulnerability validation through self-proof-of-concepts, partnering directly with Engineering and GTM to maintain an accurate security posture. If you want a role where your technical depth directly secures a market-leading revenue platform from day one, this is i