Staff Cybersecurity Engineer - Pen Testing

Hybrid: #LI-Hybrid

BMC empowers nearly 80% of the Forbes Global 100 to accelerate business value, faster than humanly possible. Our industry-leading portfolio unlocks human and machine potential to drive business growth, innovation, and sustainable success. BMC does this in a simple and optimized way by connecting people, systems, and data that power the world’s largest organizations so they can seize a competitive advantage.

Our IS&T (Information Services and Technology) department provides all the required technology and operational support services to run our business here in BMC! We have over 200 servers on premises to support production, disaster recovery, databases, applications and over 1000 servers in Lab environment. IS&T is transformational not only for BMC but also for the customer experience, because we give a 360 degrees view to the customer about the products they should know, opportunities in the pipeline, and any service issues outstanding with the customer. We use cutting-edge technologies to manage BMC's infrastructure and showcase it to the customers - program is called BMC on BMC!

The Staff Specialist Cybersecurity Engineer is responsible for identifying, assessing, and helping mitigate cybersecurity risks across the organization's infrastructure, applications, cloud environments, and external attack surface. This role combines hands-on penetration testing with broader threat management responsibilities, vulnerability risk assessment, attack surface monitoring, threat intelligence analysis, and security validation activities.

The ideal candidate possesses strong offensive security skills, practical experience conducting infrastructure and application penetration tests, and the ability to translate technical findings into actionable risk reduction strategies for engineering and business stakeholders. Experience with autonomous and LLM assisted penetration testing is desired.

Key Responsibilities:

• Penetration Testing and Security Assessments
• Perform infrastructure penetration testing across internal, external, cloud, and hybrid environments.
• Conduct web application and API security assessments.
• Perform adversary emulation and attack path validation to identify exploitable weaknesses.
• Execute authenticated and unauthenticated security assessments of operating systems, databases, network devices, and security technologies.
• Validate vulnerability exploitability and determine real-world business risk.
• Develop detailed technical reports and executive summaries documenting findings, attack paths, and remediation recommendations.
• Partner with support and infrastructure teams to validate remediation efforts and conduct retesting activities.

Threat Management:

• Identify, assess, and prioritize emerging threats that may impact the organization.
• Analyze threat intelligence from commercial, open-source, and industry sources.
• Support continuous attack surface management initiatives to identify exposed assets and security risks.
• Conduct risk-based analysis of vulnerabilities and provide prioritization guidance based on exploitability and business impact.
• Assist in developing and maintaining threat management processes, standards, and reporting.

Required Skills:

• 5+ years of experience in cybersecurity or information technology security role, with specialization in cyber threat intelligence and penetration testing.
• Candidates must be familiar with vulnerability attributes like CVEs, CVSS, and threat detection and hunting frameworks like MITRE ATT&CK framework.
• Strong understanding of network services, vulnerabilities, and attacks. Knowledge of application exploits and vulnerabilities. Knowledge of ports and services typical in the configuration of web servers, file servers, and workstations
• Previous experience conducting penetration testing both using autonomous and AI tools and manually using experience and infrastructure knowledge.
• Strong written, communication, and presentation skills along with the ability to work in a highly collaborative environment

Desired skills (nice to have):

• Well-developed scripting skills in Python or PowerShell.
• Strong knowledge of web and application security, good working knowledge of cloud security as it applies to Threat Management.
• Broadly experienced Cybersecurity Engineer with depth of knowledge in two or more disciplines.

CA-DNP

Our commitment to you!

BMC’s culture is built around its people. We have 6000+ brilliant minds working together across the globe. You won’t be known just by your employee number, but for your true authentic self. BMC lets you be YOU!

If after reading the above, You’re unsure if you meet the qualifications of this role but are deeply excited about BMC and this team, we still encourage you to apply! We want to attract talents from diverse backgrounds and experience to ensure we face the world together with the best ideas!

BMC is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender, gender expression, gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status as a protected veteran. If you need a reasonable accommodation for any part of the application and hiring process, visit the accommodation request page.

BMC Software maintains a strict policy of not requesting any form of payment in exchange for employment opportunities, upholding a fair and ethical hiring process.

At BMC we believe in pay transparency and have set the midpoint of the salary band for this role at 2,117,800 INR. Actual salaries depend on a wide range of factors that are considered in making compensation decisions, including but not limited to skill sets; experience and training, licensure, and certifications; and other business and organizational needs.

The salary listed is just one component of BMC's employee compensation package. Other rewards may include a variable plan and country specific benefits.

We are committed to ensuring that our employees are paid fairly and equitably, and that we are transparent about our compensation practices.

(Returnship@BMC)

Had a break in your career? No worries. This role is eligible for candidates who have taken a break in their career and want to re-enter the workforce. If your expertise matches the above job, visit to https://bmcrecruit.avature.net/returnship know more and how to apply.

Min salary

1,588,350

Mid point salary

2,117,800

Max salary

2,647,250

Min Salary - NEW

1,588,350

Max Salary - NEW

2,647,250