{"id":965946,"url":"https://alion.io/job/bazaarvoice-senior-offensive-security-engineercloud-operations","title":"Senior Offensive Security Engineer(Cloud Operations)","company":{"id":4698,"name":"Bazaarvoice","domain":"bazaarvoice.com","url":"https://alion.io/company/bazaarvoice","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":78,"open_postings":8,"ghost_share":0,"stale_share":0.625,"repost_share":0.125,"time_to_fill_p50_days":93,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":46000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true},{"name":"SDL","optional":true}],"status":"live","first_seen_at":"2026-01-09T14:56:58Z","employer_posted_date":"2026-01-09","last_verified_at":"2026-10-16T16:26:35Z","board_verified":true,"closed_at":null,"days_open":280,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":279},"description":"We are looking for a Senior Offensive Security Engineer who is a \"Jack of all trades, Master of some.\" You don’t need to be a world-class Red Teamer AND a Cloud Architect; rather, you need a solid foundation in offensive security, operational experience in cloud platforms (AWS/GCP) and the maturity to manage our external penetration testing and bug bounty programs. As a leader within our proactive security strategy, you will drive the identification of complex vulnerabilities through expert management of third-party tests and by leading sophisticated, in-depth internal assessments of our cloud infrastructure. You will operate with a high degree of autonomy, tackling significant security challenges while mentoring others to influence strategy across the organization.\nShift Hours: This position will have working hours of 1:00 PM to 10:00 PM IST (Indian Standard Time) and will allow for a mixture of in-office and work from home.\nWhat You'll Be Doing:\nLead Offensive Security Engagements: Own and execute complex, end-to-end internal penetration tests against Bazaarvoice's most critical applications, infrastructure, and cloud environments. You will simulate advanced, multi-stage attack scenarios to uncover systemic security weaknesses before they can be exploited.\n\nProgram and Tooling Enhancement: Take a lead role in defining the strategy for our offensive security capabilities. You will research, prototype, and implement new tools, techniques, and automation to mature our testing processes and keep pace with the evolving threat landscape.\n\nStrategic Third-Party Penetration Test Management: Act as the primary technical lead for our third-party penetration testing program. You will not only manage the engagement lifecycle but also define the strategic direction of our testing roadmap, ensuring we partner with providers to target the highest-risk areas of our business.\n\nBug Bounty Program Leadership: Design, lead, and operate all aspects of our bug bounty program, serving as the technical interface for third-party researchers and coordinating internal responses to submitted vulnerability findings, ensuring clear communication and timely resolution.\n\nMentorship and Technical Leadership: Mentor junior team members and act as a security champion and trusted advisor to engineering teams. You will elevate the security knowledge across the organization by leading training sessions, developing secure coding guidelines, and providing expert consultation on secure architecture.\n\nThreat Modeling: Proactively engage with development teams early in the SDLC to conduct threat modeling exercises, helping them build more secure products from the ground up.\n\nRequired Skills and Experience:\nBachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience with 10+ years of related experience.\n\n7+ years of hands-on experience in offensive security, with a strong background in penetration testing, red teaming, or application security.\n\nOperational Cloud Expertise: 3-5 years of hands-on experience operating in, managing, or performing manual penetration tests of cloud infrastructure (AWS preferred), with a deep understanding of cloud-native attack vectors (e.g., IAM exploitation, container escapes, and serverless security).\n\nExpert-level knowledge in managing the lifecycle of penetration testing engagements and a proven track record of driving remediation efforts in a complex, multi-team environment.\n\nDeep and practical understanding of common and advanced vulnerability classes (OWASP Top 10 and beyond) and the ability to architect solutions to remediate them at scale.\n\nHigh proficiency in one or more scripting languages (e.g., Python, Go, Bash) for advanced tool development and automation of complex tasks.\n\nExceptional communication and interpersonal skills, with a demonstrated ability to influence technical and non-technical stakeholders at all levels, including senior leadership.\n\nA proven history of mentorship and a passion for elevating the skills of those around you.\n\nDesired Skills and Experience:\nAdvanced offensive security certifications such as OSCP, OSWE, OSEP, GPEN, GXPN, or equivalent.\n\nDeep expertise in AWS cloud security operations and infrastructure-as-code security.\n\nExperience building and maturing an offensive security program or function.\n\nDemonstrated experience leading red team or purple team exercises.\n\nPublished security research, conference presentations, or active contributions to the open-source security community.\n\nExperience in a Security Development Lifecycle (SDL) environment and a history of implementing DevSecOps principles.Why You’ll Love Working with Us?\nWork with cutting-edge tech in an innovative, collaborative environment.\nCompetitive salary + good benefits (insurance, annual leave, bonuses, referral rewards, and more).\nWe’re Great Place to Work Certified (3 years in a row!).\nHybrid work model (3 days in office - Prestige Tech Pacific, Kadubeesanahalli).\nInterview Process:\nTech Round 1\nTech Round 2\nHiring Manager Meeting: Team, values & culture check.\nFinal Round: Chat with HR/Senior Leadership.\nDisclaimer:\nAll Official communications from Bazaarvoice recruitment originates strictly from our verified domain (@ bazaarvoice.com). Bazaarvoice does not send recruitment emails from different domains.\nBazaarvoice never requests payment / financial deposits as part of our selection process. All legitimate career opportunities and application details are listed on our official careers page. (https://www.bazaarvoice.com/company/careers/)\nBazaarvoice is not responsible for any unauthorized emails or interactions originating outside the official web domain.","description_format":"text","description_chars":5712,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Hybrid work"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","E-commerce Marketing","Social Commerce","Online Reviews & Ratings"],"lifecycle":[{"event":"open","at":"2026-09-16T14:50:04Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.541,"p_room":0.28,"age_days":279,"expected_fill_days":93,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/bazaarvoice-senior-offensive-security-engineercloud-operations","json_url":"https://alion.io/job/bazaarvoice-senior-offensive-security-engineercloud-operations.json","meta":{"generated_at":"2026-10-16T17:27:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2115,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4698},"rest":"https://alion.io/mcp/rest/get_company?id=4698"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbazaarvoice-senior-offensive-security-engineercloud-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbazaarvoice-senior-offensive-security-engineercloud-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbazaarvoice-senior-offensive-security-engineercloud-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bazaarvoice-senior-offensive-security-engineercloud-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbazaarvoice-senior-offensive-security-engineercloud-operations"}]}