Find Your Dream Product Manager Job in India

About Albertsons Companies Inc. (ACI):

As a leading food and drug retailer in the United States, Albertsons Companies, Inc. operates over 2,200 stores across 35 states and the District of Columbia. Our well-known banners across the United States, including Albertsons, Safeway, Vons, Jewel-Osco and others, serve more than 36 million U.S customers each week.

We build and shape technology solutions that solve customers' problems every day, making things easier for them when they shop with us online or in a store. We have made bold, strategic moves to migrate and modernize our core foundational capabilities, positioning ourselves as the first fully cloud-based grocery tech company in the industry.

Our success is built on a one-team approach, driven by the desire to understand and enhance the customer experience. By constantly pushing the boundaries of retail, we are transforming shopping into an experience that is easy, efficient, fun and engaging.

About Albertsons India Capability Center:

At Albertsons India Capability Center, we're not just pushing the boundaries of technology and retail innovation, we're cultivating a space where ideas flourish and careers thrive. Our workplace in India is a vital extension of the Albertsons Companies Inc. workforce and important to the next phase in the company's technology journey to support millions of customers' lives every day.

At the Albertsons India Capability Center, we are raising the bar to grow across Technology & Engineering, AI, Digital and other company functions, and transform a 165-year-old American retailer. At Albertsons India Capability Center, associates collaborate directly with international teams, enhancing decision-making processes and organizational agility through exciting and pivotal projects. Your work will make history and help millions of lives each day come together around the joys of food and inspire their well-being.

We are seeking a strategic, data-savvy product leader who can connect business outcomes with technical execution for In-Store Execution initiatives. This role requires strong product judgment, comfort operating in ambiguity, and the ability to influence at scale across people, processes, and technology.

The ideal candidate is an ambitious leader with a proven track record of delivering platforms that create measurable business impact and exceptional value for store teams and customers.

Role Overview:

We are looking for a Principal Product Management - In-Store Digitalization to lead a global product organization responsible for building and scaling platforms that power store-level execution, operational excellence, and real-time decision-making across Albertsons Companies.

This is a high-impact senior leadership role reporting directly to the VP of Product. You will define long-term product strategy, lead multi-year roadmaps, and partner closely with Technology, Data Science, Operations, Digital, and external partners.

The role is based in Bengaluru, India, leading cross-functional teams across the US and India.

Product Areas Owned:

The Principal Product Manager will own and evolve platforms supporting:

• In-Store Digitalization Platforms - Tools and systems that enable consistent execution of Inventory management tools, pricing, promotions, labor, and operational workflows at store level.
• Operational Insights & Analytics - Data platforms and reporting capabilities that provide actionable insights to store operators and field teams.
• Execution Intelligence & Automation - Leveraging AI/ML and agentic workflows to improve task prioritization, compliance, and execution efficiency across stores.
• Enterprise Integrations - Ensuring seamless integration with merchandising, supply chain, labor, and fulfillment systems across the Albertsons ecosystem.

Key Responsibilities:

Product Strategy & Vision:

• Define and own the multi-year product vision and strategy for In-Store Execution platforms.
• Develop and maintain multi-quarter roadmaps aligned to business priorities, customer needs, and operational outcomes.
• Identify opportunities to simplify, standardize, and scale store execution through technology.

Data-Driven Decision Making:

• Analyze large datasets to uncover insights that drive product decisions and operational improvements.
• Present clear, compelling narratives and visualizations to influence senior leadership and executive stakeholders.

Execution & Operational Excellence:

• Ensure product delivery through well-defined epics, user stories, and acceptance criteria.
• Account for dependencies across systems, teams, and initiatives.
• Drive predictable delivery while balancing speed, quality, and scalability.

Cross-Functional Leadership:

• Partner closely with Engineering, Data Science, Operations, Merchandising, Digital, and Store Operations.
• Align multiple stakeholders around shared goals and measurable outcomes.
• Operate effectively in ambiguous problem spaces and translate them into actionable initiatives.

Collaboration with Data Science & Engineering:

• Work with Data Science teams to build, test, and optimize AI/ML models supporting execution efficiency, labor optimization, and store performance.
• Champion platform thinking, reusability, and long-term architectural health.

People Leadership:

• Build, mentor, and develop high-performing product teams across geographies.
• Foster a culture of accountability, innovation, and continuous learning.

Experience:

• Bachelor's degree in engineering, Business, or a related field.
• Masters in engineering or MBA
• 5-10 years of experience in Product Management, with leadership experience managing product teams.
• Strong analytical skills with proficiency in SQL and data analysis.
• Proven experience delivering enterprise-scale platforms in complex environments.

Consulting Experience:

Great To Have:

• Consulting experience.
• Exposure to large-scale digital transformation initiatives.
• Experience partnering with Data Science teams to develop and operationalize models.
• Demonstrated success delivering results in ambiguous environments

Competencies:

• Compassionate and kind, showing courtesy, dignity, and respect. They show sincere interest and empathy for all others.
• Foster innovation through creativity to get to a workable solution. Use analytical thinking through issues using logic and reason
• Show integrity in what is done and how it is done - without sacrificing personal/business ethics.
• Embrace an inclusion-focused mindset, seeking input from others on their work and encouraging the open expression of diverse ideas and opinions
• Team-oriented, positively contributing to team morale and willing to help.
• Learning-Focused, finding ways to improvise in their field and use positive constructive feedback to grow personally and professionally
• Think strategically and proactively anticipate future problems, needs or changes in the work
• Retail Domain Experience is required
• Experienced in mentoring development teams
• Hands-on experience in production environments with an SRE (Site Reliability Engineering) mindset
• Proficient in design patterns and architectural skills, with a proven track record of delivering large-scale initiatives while managing multiple parallel projects effectively

Skills Required:

• Product Management, Agile methodologies
• Experience in demand planning, labor planning, fulfillment, or slot management systems.
• Retail, eCommerce, or supply chain experience.

Additional Skills:

• Exceptional ability to operate as a team player and build strong relationships across teams.
• Demonstrated ability to influence stakeholders and communicate complex ideas effectively.
• Passionate about solving customer problems and delivering great products.

About Albertsons Companies Inc. (ACI):

As a leading food and drug retailer in the United States, Albertsons Companies, Inc. operates over 2,200 stores across 35 states and the District of Columbia. Our well-known banners across the United States, including Albertsons, Safeway, Vons, Jewel-Osco and others, serve more than 36 million U.S customers each week.

We build and shape technology solutions that solve customers' problems every day, making things easier for them when they shop with us online or in a store. We have made bold, strategic moves to migrate and modernize our core foundational capabilities, positioning ourselves as the first fully cloud-based grocery tech company in the industry.

Our success is built on a one-team approach, driven by the desire to understand and enhance the customer experience. By constantly pushing the boundaries of retail, we are transforming shopping into an experience that is easy, efficient, fun and engaging.

About Albertsons India Capability Center:

At Albertsons India Capability Center, we're not just pushing the boundaries of technology and retail innovation, we're cultivating a space where ideas flourish and careers thrive. Our workplace in India is a vital extension of the Albertsons Companies Inc. workforce and important to the next phase in the company's technology journey to support millions of customers' lives every day.

At the Albertsons India Capability Center, we are raising the bar to grow across Technology & Engineering, AI, Digital and other company functions, and transform a 165-year-old American retailer. At Albertsons India Capability Center, associates collaborate directly with international teams, enhancing decision-making processes and organizational agility through exciting and pivotal projects. Your work will make history and help millions of lives each day come together around the joys of food and inspire their well-being.

Role: Digital Product Manager:

What you will be doing:

Main responsibilities:

• Educate and work with other product managers and business on Martech Capabilities and opportunities.
• Work closely with Marketing to build a cohesive and full end to end solution to support all customer journeys.
• Define product strategy for the discovery and planning product area by partnering with respective PMs and defining the landscape of Marketing Technology platform to support enterprise marketing.
• Own the product lifecycle, from discovery, definition, execution to launch & iteration for their products.
• Define detailed use cases, product requirements, and technical specs needed to support roadmap initiatives.
• Participate and lead an agile development process, working closely with internal Tech teams and multiple offshore engineering teams.
• Maintain standards for a data-driven approach to making decisions and gain user insight using rigorous A/B tests, qualitative user studies, and quantitative market research.
• Define overall user-facing commerce experiences, platforms, and services KPIs and ensure proper instrumentation to track against goals.
• Partner with cross-functional team members to gain insight into our customer and market segments with respect to offers, acquisition, and retention goals.
• Experience working with real time/time sensitive communications platform.

What we are searching for:

• Bachelor's degree or equivalent in marketing and/or Marketing tech
• 3+ years in Marketing/Advertising area including but not limited to Salesforce Marketing Cloud, Customer Data Platforms, Kafka, Data Systems, Attribution, Personalization, and building automated marketing technologies
• Experience in consulting and/or setting platform product direction to meet customer needs
• Strategic and analytical skills with the ability to translate between strategic business decisions and their quantitative implication
• 6 years' experience in marketing technology product management
• 1+ years' experience managing direct reports
• Internet and retail experience preferred
• Strong analytical, prioritization and negotiating skills
• Usability and customer-focused design experience a plus
• Passionate about building great products and solving customer and business problems
• Nice to have, event-based architecture

What it is like at Albertsons:

Albertsons Culture Principles:

• Compassion: We always treat each other with kindness and respect
• Team: We always support and recognize each other
• Inclusive: We always value everyone's perspective
• Learning: We always strive to grow and develop ourselves and others
• Competitive: We always act with integrity to win over the customer
• Ownership: We always take actions to drive our success

About Albertsons Companies Inc. (ACI):

As a leading food and drug retailer in the United States, Albertsons Companies, Inc. operates over 2,200 stores across 35 states and the District of Columbia. Our well-known banners across the United States, including Albertsons, Safeway, Vons, Jewel-Osco and others, serve more than 36 million U.S customers each week.

We build and shape technology solutions that solve customers' problems every day, making things easier for them when they shop with us online or in a store. We have made bold, strategic moves to migrate and modernize our core foundational capabilities, positioning ourselves as the first fully cloud-based grocery tech company in the industry.

Our success is built on a one-team approach, driven by the desire to understand and enhance the customer experience. By constantly pushing the boundaries of retail, we are transforming shopping into an experience that is easy, efficient, fun and engaging.

About Albertsons India Capability Center:

At Albertsons India Capability Center, we're not just pushing the boundaries of technology and retail innovation, we're cultivating a space where ideas flourish and careers thrive. Our workplace in India is a vital extension of the Albertsons Companies Inc. workforce and important to the next phase in the company's technology journey to support millions of customers' lives every day.

At the Albertsons India Capability Center, we are raising the bar to grow across Technology & Engineering, AI, Digital and other company functions, and transform a 165-year-old American retailer. At Albertsons India Capability Center, associates collaborate directly with international teams, enhancing decision-making processes and organizational agility through exciting and pivotal projects. Your work will make history and help millions of lives each day come together around the joys of food and inspire their well-being.

Role: Digital Product Manager - DAM

What you will be doing:

Albertson's Companies is re-imagining the grocery experience through a digital and customer experience transformation. The Product Manager be responsible for the implementation of a new cloud-based Digital Asset Management (DAM) platform and migration of assets and key infrastructure integrations from an incumbent system. S/he will be responsible for standing up and configuring a new enterprise DAM solution that will be ready to support multiple repositories for dozens of internal teams, standardizing folder and tagging structures, establishing scalable user groups and permissions schema, and working with numerous internal partners & users to gather team-specific requirements, media specifications, and access needs. The right candidate will have experience with DAM platforms and content media management; be able to interface with multiple business partners, users, and dependents to gather their unique requirements; and own the product & feature roadmap for a DAM system moving forward.

The position will be based in our Global Capability Center (GCC) in Bengaluru, India, and will be expected to interface with business stakeholders and leads based in the United States (Seattle WA, Pleasanton CA, Denver CO, Plano TX, Boise ID).

Main responsibilities:

• Define product strategy for the discovery and planning product area by partnering with respective PMs and key business and operational partners, to maintain a proactive roadmap of capabilities and functions to support a DAM platform at enterprise scale.
• Own the product lifecycle, from discovery, definition, execution to launch & iteration for their products.
• Act as the subject-matter-expert and product-platform owner for a cloud-based DAM platform
• Interface and support business-platform owners and key stakeholders, including Brand Marketing, Catalog, Pharmacy, Collective, Loyalty, and others
• Gather requirements and establish working relationships with client/dependent teams that will be leveraging the DAM for their media-asset storage needs
• Represent stakeholder needs and priorities when designing requirements and specifications for custom integrations and capabilities
• Define detailed use cases, product requirements, and technical specs needed to support roadmap initiatives.
• Work closely with engineering partners and vendor liaisons to implement new functionality and capabilities, perform system upgrades and patches, and own custom features specific to Albertsons.
• Participate and lead an agile development process, working closely with internal Tech teams and multiple onshore and offshore engineering teams.
• Maintain standards for a data-driven approach to making decisions and gain user insight using internal metrics, user interviews, and adoption rates
• Define success criteria and KPIs to justify continued investment and prioritization of features.

What we are searching for:

• Bachelor's degree or equivalent in marketing and/or Marketing tech
• 3+ years in Marketing/Advertising area with experience including but not limited to content management, brand management and styling, media management, and digital asset management (DAM) platforms and solutions
• Familiarity with industry-leading DAM platforms including Adobe Experience Manager, Orange Logic, Acquia, Bynder, or others
• Experience in configuring platforms for multiple teams and users with defined user access & permissions; structuring media folder content in a way that is organized but intuitive and non-cumbersome; building out metadata schemas that can scale to an enterprise
• Strategic and analytical skills with the ability to translate between strategic business decisions and their quantitative implication
• 6 years' experience in marketing technology product management
• Internet and retail experience preferred
• Strong analytical, prioritization and negotiating skills
• Usability and customer-focused design experience a plus
• Passionate about building great products and user-interfaces; and solving customer and business problem

Greetings from MM Management!

MM Management is a Global Recruitment Service Provider. Your profile is shortlisted for the initial screening of the Technical Product Manager

About Company

As a premier provider, we craft advanced platforms, optimize processes, provide creative content solutions, and deploy efficient adoption teams that collectively drive accelerated business growth. Our operations span four continents-North America, Europe, Asia, and Australia-where we deliver tailored solutions to diverse industries.

Role Overview:

We are looking for a seasoned Technical Product Manager with 10+ years of experience in AI-enabled product engineering, end-to-end architecture ownership, and modern full-stack technologies. The role requires leading multi-disciplinary teams to deliver scalable, API-driven platforms, advancing innovation through applied R&D, and leveraging low-code/no-code tools. The ideal candidate will have deep expertise in API-First architecture - encompassing Next.js, GraphQL, Python microservices, AWS infrastructure, RAG pipelines, and Agentic AI systems. Experience integrating ERP and enterprise systems into LLM-based and automation-focused solutions is essential.

Roles and Responsibilities:

Lead end-to-end product delivery across multiple technology products and platforms, owning the full architecture lifecycle from design to production

Drive architecture discussions - including API-First design, microservices decomposition, and cloud infrastructure decisions - ensuring alignment with product strategy

Collaborate with engineering, product, and business teams to define requirements, timelines, and delivery milestones

Manage full-stack engineering initiatives involving AI/ML, frontend (Next.js), backend (Python, Node.js), and databases (PostgreSQL, PG Vector)

Oversee AWS infrastructure design and operations across AppRunner, EC2, RDS, EBS, S3, and associated services

Govern and evolve the API Backend - including the API Layer (Next.js Service), Data Access Layer (GraphQL), Storage & Infrastructure Layer, and AI Platform Layer

Conduct R&D to evaluate new technologies and enhance product capabilities, particularly in LLM, RAG, and Agentic AI domains

Implement Agile best practices: sprint planning, backlog management, and risk mitigation

Monitor KPIs, budget, and performance metrics to ensure on-time, high-quality delivery

Ensure smooth integration of low-code/no-code accelerators to reduce development timelines

Maintain technical documentation and ensure security and compliance standards are met (encryption, audit logs, SSL/TLS)

Qualifications and Skills:

• Bachelor's or Master's degree in Computer Science, Engineering, IT, or equivalent field
• 10+ years of professional experience in technical project management with hands-on architecture ownership
• Deep expertise in full-stack development including:
• Frontend: Next.js / React JavaScript frameworks (AWS AppRunner deployment)
• Backend: Python (EC2-hosted microservices), Node.js / Next.js Service (AWS AppRunner)
• API / Data Layer: Hasura GraphQL server (AWS AppRunner), REST API design and governance
• Databases: PostgreSQL with PG Vector extensions, AWS RDS with encryption and audit logs
• File & Static Storage: AWS S3 (user uploads, AI pipeline docs, static files)
• End-to-end architecture ownership experience including:
• API-First architecture design - defining Presentation, API, Data Access, Storage, and AI Platform layers
• Secure API Gateway design and governance
• AI Processing Pipeline: Ingestion & Parsing, Chunking & Metadata Extraction, Embedding, LLM integration
• Hands-on AI/ML experience including:
• LLM-based models for recommendation systems, predictive insights, and extraction from unstructured data
• RAG (Retrieval-Augmented Generation) pipeline design and operations
• Agentic AI systems design and deployment
• Vector database usage (PG Vector / PostgreSQL) for semantic search and embedding
• Experience with microservices, REST APIs, and GraphQL in production environments
• Knowledge of DevOps practices: CI/CD, version control, and environment management
• Exceptional R&D mindset with the ability to evaluate and adopt emerging technologies
• Excellent stakeholder communication, presentation, and coordination skills
• Strong analytical, problem-solving, and decision-making abilities
• Proven cross-functional team management across engineering, product, and business units
• Ability to thrive in fast-paced environments with changing priorities and multiple concurrent projects

If interested, send your updated resume to OR wtsp:

Hiring Alert: Derivative Product Manager at Arihant Capital!

If you thrive at the intersection of trading, technology, and product ownership-and love building products traders actually use-this one's for you.

Arihant Capital Markets Limited is a trusted name in India's capital markets, committed to building powerful, reliable, and compliant trading platforms for active traders and investors. We're focused on creating products that are fast, intuitive, and built with deep market understanding.

To power the next phase of our growth, we're looking for a Derivative Product Manager who can take complete ownership of derivative trading products across mobile and web. This is a high-impact role for someone who doesn't just manage roadmaps-but builds, launches, and scales products end-to-end.

This is not a coordination-only role. You will take product decisions, work hands-on with engineering and growth teams, and own outcomes.

The role:

Product Strategy & Ownership

Own the vision, roadmap, and strategy for derivative trading products. Take complete ownership of the assigned module, including P&L. Identify user needs, market opportunities, and competitive gaps to drive product success.

Product Development

Work closely with engineering, design, QA, and marketing to deliver high-quality trading features. Prepare BRDs/PRDs, functional specs, user journeys, and workflows. Drive development of critical trading capabilities including order types, positions & holdings, margin & risk management, market data & charts, option chain, payoff graphs, algo strategies, reports, and compliance features.

Market Analysis

Stay deeply plugged into market trends, regulations, and competitive landscape. Translate insights into product decisions that create real trader value.

Mobile & Web Platforms

Ensure a seamless, reliable, and consistent experience across mobile apps and web platforms. Continuously optimize performance, usability, and stability.

Go-To-Market & Growth

Define and execute GTM strategies for new launches. Post-launch, track KPIs, analyze user behavior, and work with growth teams to improve adoption, engagement, and retention.

Stakeholder Management

Act as the single point of contact for the derivative product module. Communicate clearly with leadership and stakeholders, and collaborate closely with sales, operations, finance, and external partners.

Financial Analysis

Assess product profitability and viability. Work with finance teams on pricing strategies and revenue optimization.

You fit right in if you have:

• 5-10 years of experience as a Product Manager in trading
• Strong domain expertise in F&O, margins, Greeks, risk management, and order lifecycle
• Hands-on experience with mobile and web trading platforms
• Ability to write clear, detailed BRDs / PRDs
• Data-driven mindset with strong analytical skills
• Excellent communication and stakeholder management abilities
• Experience in broking, fintech, or capital market platforms (preferred)
• Exposure to regulatory and compliance requirements (preferred)
• Engineering graduate from a reputed college (preferred)

Location: Mumbai

Apply now:

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Angara is a leading fine jewellery brand known globally for its exceptional gemstones, craftsmanship, and seamless online shopping experience. After establishing a strong presence in the US and other international markets, Angara India is rapidly expanding its footprint, combining premium design with cutting-edge digital retail. Our mission is to make high-quality, customizable gemstone jewellery accessible to customers across India.

Angara was ranked the No.1 Online Jeweler in the US in 2020 by the leading American magazine, Newsweek. We were also recognized by Newsweek as 5 Year Champion on being voted among the best online jewelers in its list of "Best Online Shops" for five years in a row. That's not all. Our ground-breaking innovation, 'Create with Angara,' earned us the Business Intelligence Group's 2024 BIG Innovation Award as well as the spot in Retail on Fast Company's Most Innovative Companies 2024 list. In addition to this, we secured the prestigious Bizrate Insights Circle of Excellence Award for two consecutive years as well as the Business Intelligence Excellence in Customer Service Award 2023. Better Business Bureau has rated Angara A+ for excellence in service and our Trust Pilot rating out of 5.

Key Responsibilities:

Research & Analysis: Conduct deep research, analyze data, and deliver actionable insights to improve user experience and conversion.

E-Commerce Funnel Optimization: Continuously analyze and enhance the purchase funnel, ensuring smooth customer journeys and higher conversions.

SEO Strategy: Own SEO for the purchase funnel and implement strategies that directly contribute to visibility and growth.

Growth Initiatives: Lead the ideation and successful implementation of at least 2 new growth apps/features per year.

Cross-Functional Support: Assist internal teams (Marketing, Tech, Product, Business Ops) by solving blockers and ensuring smooth usage of the Angara platform.

User-Centric Mindset: Understand and empathize with users, building features that reflect user emotions and needs.

Execution & Delivery: Create mind-maps, wireframes, mockups, and detailed requirement documents to guide development.

Strategist & Problem Solver: Act as both a strategist and an executionist, ensuring innovative ideas are turned into impactful product features.

Stakeholder Management: Communicate effectively across teams and leadership, aligning all stakeholders to business and product goals.

Must have Skills:

Proven experience in e-commerce funnel management, bringing data-driven insights to drive growth.

Strong expertise in SEO within the purchase funnel.

Demonstrated track record of implementing at least 2 growth-focused apps/features in a year.

Hands-on experience with market research, data analysis, data insights, mind-maps, and mockups.

Strong user-centric approach with the ability to think and act from the user's emotional perspective.

Fast learner, always exploring new trends, tools, and approaches.

Excellent strategic thinking, execution, and problem-solving abilities.

Strong stakeholder management and communication skills.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager

Location: Bengaluru, India

Department: Product Management

About the Role

We are looking for a Senior Product Manager to own the product roadmap and delivery for one of Aurigo's core product lines. You will work directly with engineering, design, customers, and the sales team to define what gets built, ensure it is built right, and enable the go-to-market team to position and sell it effectively. This is a high-ownership role for a product manager who is equally comfortable in front of a customer as they are writing a detailed product requirement.

Roles and Responsibilities

• Own and manage the end-to-end product roadmap for your assigned product line, aligning with company strategy and customer needs.
• Work closely with engineering teams to define requirements, write detailed user stories, and ensure on-time, high-quality delivery.
• Conduct regular customer discovery through interviews, site visits, and sales cycle participation to deeply understand buyer pain points and jobs to be done.
• Translate customer insights and market research into clear product requirements and prioritized backlogs.
• Collaborate with product marketing to develop positioning, value propositions, and sales enablement content for your product area.
• Partner with the Director to manage stakeholder expectations, communicate roadmap d

WHO WE ARE:

is the cloud network security company trusted by more than 500 of the world’s leading enterprises. As cloud infrastructures become more complex and costly, the Aviatrix Cloud Network Security platform gives companies back the power, control, security, and simplicity they need to modernize their cloud strategies. Aviatrix is the only secure networking solution built specifically for the cloud, that ensures companies are ready for AI and what’s next. Combined with the , the industry’s leading secure multicloud networking certification, Aviatrix unifies cloud, networking, and security teams and unlocks greater potential across any cloud.

ABOUT THE ROLE: Senior Product Manager

As a Senior Product Manager at Aviatrix, you will play a critical role in owning and advancing a defined set of features or solution areas within our multi-cloud networking platform. You will collaborate with engineering, marketing, sales, and customers to create product strategies that solve real-world enterprise networking challenges. Your focus will be on delivering innovative, scalable, and secure network solutions that empower organizations to achieve cloud excellence across AWS, Azure, Google Cloud, and other platforms.

KEY RESPONSIBILITIES

• Define a metrics-driven product strategy for a defined set of features or solution areas focused on multi-cloud solution adoption ensuring alignment with Aviatrix’s overall

We are a seed-funded startup focused on using state-of-the-art AI technologies to revolutionize the credit industry. Our team consists of experts in machine learning and software engineers who have worked at top-tier US tech companies like Apple, Amazon, etc , and we are passionate about using AI to improve access to credit information for businesses.

We are seeking a Associate Product Manager, Data with a strong background in financial services, data integration, and B2B SAAS. This role is ideal for a data-savvy individual who will lead the strategy, sourcing, and integration of data to power innovative credit risk analysis and supply chain intelligence solutions. Reporting directly to the leadership, you will play a key role in shaping how our products leverage high-quality, diverse data sources to deliver unparalleled insights to our customers.

Key Responsibilities

• Data Strategy and Sourcing: Develop and execute a comprehensive strategy for acquiring and integrating diverse data sources to enhance credit risk analysis and supply chain intelligence capabilities. Identify and evaluate potential data partnerships and acquisition opportunities to address market needs and gaps.
• Market Research: Conduct thorough market research to understand emerging trends, data regulations, and best practices in data acquisition for the financial services sector. Assess the availability, quality, and utility o

Job Title: Product Manager

Experience : 5+ Years

Location : Bangalore

Department : Marketing & Strategy

Reports To : MD

Notice Period – Immediate to 15 Days

About Neolacta Lifesciences

Neolacta Lifesciences is the first and only company in India—and Asia—to offer 100% human milk- based nutritional products for preterm and critically ill infants. Our purpose-driven innovation and pioneering work in neonatalnutrition have alreadysaved over 1.4 lakh babies.We are committed to improving infant health outcomes through cutting-edge science and ethical marketing practices.

Role Overview

We areseeking a passionate and experienced Brand Manager / Product Manager to leadbrand strategy and product portfolio management for our life-saving nutritional products. This role demands a blend of strategic thinking,scientific acumen, and hands-on executionin a purpose- led and regulated healthcare environment.

Key Responsibilities Brand & Product Strategy

• Lead brand planning, positioning, and go-to-market (GTM) strategies for key products including NeoLact 70, 100% human milk fortifiers , and related offerings.
• Work closely with clinical, regulatory, and R&Dteams to build medically credible, compliant brand narratives.
• Assist with participating in conferences - regional and nationa

We are looking for a Senior Product Manager – Supply Chain to lead product strategy and execution across procurement, demand planning, inventory, warehousing, and logistics systems

Reporting to: Director of Product - Supply Chain

This role will own end-to-end supply chain product initiatives that improve service levels, reduce wastage, and optimize fulfillment costs while enabling scalable growth.

You will work closely with supply chain operations, planning, finance, data science, and engineering teams to build high-impact products that power Licious’ supply chain engine.

Key Responsibilities

1. Product Strategy & Roadmap

• Define and drive the product vision for supply chain tech across procurement, planning, inventory, and fulfillment.
• Build and execute the roadmap aligned with business goals: fill rate, freshness SLAs, wastage reduction, and cost optimization.
• Identify opportunities to digitize and automate supply chain decision-making using data and ML.

2. Demand & Supply Planning Systems

• Lead development of demand forecasting and supply planning tools.
• Improve forecast accuracy using historical data, seasonality, promotions, and external signals
• Partner with data science teams to operationalize predictive planning models

3. Inventory & Warehouse Optim

Position: AIQMS Product Manager

Location: Kolkata / Bangalore

Experience: 12 - 15 years

Role Summary

Our Client Company is a fast-growing, AI-first unified Customer Experience Management (CXM) platform built specifically for modern contact centers and BPOs.

We are looking for a Senior Product Manager who will own the AIQMS product end-to-end . You will act as the bridge between business needs and the technical team . You will decide what features to build next, make sure the product solves real problems for customers, and help drive its growth. This is a part business analyst and part technical Product Manager role.

Key Responsibilities

• Talk to call center leaders, QA managers, and customers to understand their pain points in quality checking and agent performance.
• Create and own the product roadmap for AIQMS — decide which features to build, improve, or remove.
• Write clear requirements and user stories so the engineering and AI/ML teams know exactly what to build (e.g., real-time alerts, better scoring for compliance, coaching suggestions).
• Work closely with AI and engineering teams to define how the AI should analyze calls (accents, sentiment, compliance rules, etc.).
• Test new features, check results using data, and make sure the product delivers

Job Summary

Chargebee is in the pursuit of simplifying the recurring payment collection for merchants from their global customer base as a part of the overall subscription management platform. As a part of this critical Payments team, you will be a key member operating at a cross section of cutting edge payments and a state of the art innovative platform aimed at experience driven global services to our customers. It entails the full spectrum of conceptualization of ideas to gathering and documenting requirements on one end to working closely with other functions like Finance, Legal, Compliance and Infrastructure & Product Engineering teams to get their requirements met. In this role you will be responsible for managing product lifecycle across various payment types, internal and external partners, token services, enriching customer experience through UX/UI, helping build state of the art front and back-end payment API services to enable global success of the platform.

Roles and Responsibilities

Product Management

• Develop and drive the product vision & strategy to enable seamless expansion opportunities for Chargebee customers which aligns with the company's overall strategy and goals.
• Break down and define the roadmap to help achieve the desired goals in an optimal manner.
• Conduct market research, collaborate with customers and GTM teams to identify customer needs, industry trends, and

LinkedIn is the world’s largest professional network, built to create economic opportunity for every member of the global workforce. Our products help people make powerful connections, discover exciting opportunities, build necessary skills, and gain valuable insights every day. We’re also committed to providing transformational opportunities for our own employees by investing in their growth. We aspire to create a culture that’s built on trust, care, inclusion, and fun – where everyone can succeed.

Join us to transform the way the world works.

About the job

About the job

Manager-Product Management

About Infosys Finacle

Finacle is an industry leader in digital banking solutions. We are a unit of EdgeVerve Systems, a product subsidiary of Infosys. We partner with emerging and established financial institutions to help inspire better banking. Our cloud-native solution suite and SaaS services help banks engage, innovate, operate, and transform better to scale digital transformation with confidence. Finacle solutions address the core banking, lending, digital engagement, payments, cash management, wealth management, treasury, analytics, AI, and blockchain requirements of financial institutions. Banks in over 100 countries rely on Finacle to help more than a billion people save, pay, borrow, and invest better.

To know more about Finacle, visit

Role scope

• Designation: Manager-Product Management
• Base location: Bengaluru
• Full-time employee
• Required work experience: 10-15 years

To drive product design while balancing customer needs and business requirements to tap the existing market potential

• 10+ years of proven Product Management experience in a software / product development organization (primary requirement)/ Banks/ NBFC/ FinTech (primary requirement)
• Demonstrated competence in creating complex solutions / products whil

Role: Product Manager: Escrow (Corporate Banking)

Preferred Grade: AVP/DVP

Purpose: Escrow/Nodal, TRA, Product Management and Commercialisation

Location: Lower Parel

Required Qualification: MBA

Required Experience: Minimum 5 years Relevant Experience

Stakeholders: Corporate Banking, Retail Banking, IT, Compliance, Risk and Ops

Required Competencies: Technical Must have sound knowledge of Escrow, RERA, TRA account processes

Required Competencies Behavioural: Driving and creating awareness on various products across the business team(s). Improvement in existing products and processes

Job Description

• New Escrow account product and process development as per
• Business requirement and implementation.
• Ensuring UAT, building system capability and roll out.
• Should have sound knowledge on Escrow/TRA accounts and operational flows
• Aware about both Physical and digital processes, onboarding and servicing of Escrow customers
• Responsible for activities related to the development of new products and/or functionality of products including product enhancements, innovation, etc based on market research and trends complying with regulatory guidelines
• Contribution to Banks growth through Fee and Balance from the product owned
• Prepare product note, SOPs, form, annexures , formats, etc
• Should be able to automate manual process an

Associate Product Manager

The Role

We are looking for a sharp, execution-focused Product leader to own our Health plan Benefit Management System — a critical platform that powers how health plans define, configure, and deliver benefit information across products and channels.

This is not a role for someone who likes to stay at 30,000 feet. You will be deep in the details — data models, schema changes, interface contracts — while simultaneously keeping an eye on the bigger picture: what does this mean for our clients, our roadmap, and our business? You will be the connective tissue between our engineering teams, business clients, and internal stakeholders, driving clarity, accountability, and delivery.

What You Will Own

• Product Solutioning — Define, prioritize, and drive the roadmap for the Plan Benefit Management System. Translate complex business rules and healthcare benefit configurations into well-scoped, actionable product requirements.
• Stakeholder Representation — Confidently represent the team in meetings with internal stakeholders and business owners. You are the voice of the product in every room you walk into.
• Cross-Team Dependency Management — Proactively identify, track, and resolve dependencies across engineering, QA, data, and client success teams to keep delivery on track.
• Release Coordination & Change Management — Own

Location: Bangalore

Experience : 8+yrs relevant

1. 8+ years of banking domain experience (Must). Corporate/CIB credit and lending domain experience (Good to have),
2. Functional knowledge of client lifecycle systems in a Corporate, Commercial, or Institutional banking context.
3. Previous product management experience – Preparing and maintaining product roadma ps based on different dimensions and levels of granularity, Lead Working Groups and/or stakeholder engagement to ensure that execution is completed to plan, proactively update key stakeholders throughout the project lifecycle and support credit process related testing with end users
4. Proactive and self-driven individual who can manage and work with various stakeholder management including business leaders/ group of business users.
5. Work from the office client office (Bengaluru) 2 days a week, if required. (Good to have).

About Our Client: Our client is a business services organization that leverages AI and digital tools, along with human resources, to support customer-facing and operational activities. The company works with organizations across sectors and provides assistance in communication, sales support, and service operations, focusing on improving efficiency and scalability.

Job Description: AI Agent Product Manager

Location: Sec 3, Noida

Experience: 2-5 years

Qualification: Bachelor in Engineering or relevant degree

About the role: As an AI Agent Product Manager at Company, you’ll own each stage of the AI Agent building and deployment process for the largest consumer enterprises.

You’ll work directly with VP and C-level executives to shape their AI roadmap, write and test prompt logic for high-impact use cases, and collaborate with engineering to design new product features.

This is a role for someone who thrives on diving deep into complex business problems, crafting elegant AI-driven solutions, and scaling them to millions of users.

Responsibilities:

• Lead the deployment of Company’s Voice AI Agents for some of the largest consumer enterprises globally, ensuring AI agents become mission-critical to how millions of customers are engaged.
• Design and optimize enterprise-grade agents by mapping business workflows, writing and testi

About Bright Money

Money is a Consumer FinTech for middle-income consumers. It brings together SaaS products to help consumers build credit, manage their debt, and get access to suitable loans and credit cards. These are the major financial needs of middle-income consumers living paycheck-to-paycheck.

Bright is a profitable, India-built, U.S.-market Consumer FinTech, with revenue trajectory to $100M in the coming 12 months. The business model combines subscription revenue with financial service marketplace revenues for loans, credit cards, and credit-building tools.

Bright has launched an AI money assistant and AI agentic UX flows for access to credit. It will be the first AI-driven Consumer FinTech for middle-income consumers.

The Bright product suite has potential for global markets beyond the US. The market size is 100M global middle-income consumers, with a revenue pool opportunity of $15B.

Bright is backed by 3 top global venture capital firms, and leading tech angel investors in the USA, Europe, and Asia.

Bright was founded in 2019 by a founding team from McKinsey’s Banking Practice ( Petko Plachkov and Avi Patchava ) and InMobi Data Scientists (Varun Modi and Avi Patchava). The core team is ex-InMobi Engineering and Data Sciences, recently joined by senior leaders from McKinsey.

Bright is a data-driven, fast-paced execution culture that will build a Global Consum

Company Description

CallBotics is an enterprise-ready conversational AI platform with deep specialization in AI voice automation for high-volume, call-intensive workflows.

Built on over 17 years of real-world voice operations experience , CallBotics helps organizations autonomously handle up to 80% of calls end-to-end , reducing call-related costs by 65–90% . The platform integrates seamlessly with existing CRMs, dialers, and workflow systems, enabling fast, low-friction deployment for enterprise teams.

• CallBotics is not a new idea-stage company. It is a rapidly growing platform built by operators who have scaled large, real-world contact center operations and are now productizing that expertise.

Role: Product Manager -SaaS

We are looking for a SaaS Product Owner with strong experience, technical depth, leadership capability, and ownership mindset to drive international expansion, customer value, and organizational growth. The ideal candidate must have a strong engineering background, hands-on software development exposure, and proven ability to lead technical teams, manage global stakeholders, and deliver high-impact product outcomes.

KEY RESPONSIBILITIES

1. Product Strategy & Roadmap

· Communicate product vision, strategy, and roadm

Atomicwork is on a mission to transform the digital workplace experience by uniting people, processes, and platforms through AI automation. Our team is building a modern service management platform that enables growing businesses to reduce operational complexity and drive business success.

We’re looking for a Senior Product Manager to join our team and help us build our modern service management platform. We offer competitive pay to employees and practical benefits for their whole family.

If this sounds interesting to you, read on.

The opportunity for you

• You’ll work across engineering, design, and other product teams to shape a scalable, secure, and flexible platform that can adapt to the evolving needs of our customers.
• You’ll define the long-term vision for our core platform, ensuring it meets the needs of internal teams.
• You will deeply understand the problems you are handling via research, data and customer conversations, and work on defining the problems and solutions with the team, with a focus on reliability and extensibility.
• You will influence technical direction without having to write code and translating business goals into strong platform capabilities.

What we're looking for

• 8+ years of product management experience working on platform, API, or developer-focused products in a SaaS

What we are looking for:

● 4+ years of work experience in a product management role, preferably in fintech,

lending, or credit products

● Experience with product-led journeys for financial products, ideation and funnel

improvements

● Nice to have: Proven experience building lending or credit product flows, loan

origination journeys, underwriting experiences, and repayment flows in Indian

digital finance. Deep understanding of the lending ecosystem, customer behavior,

RBI/NBFC regulatory requirements, FLDG norms , KYC/AML compliance, and India’s

credit infrastructure

● Good track record in designing product solutions to solve business problems.

Obsessed with providing the highest quality product and experience to the

customer

● Ability to create a strategic product roadmap to achieve business objectives and get

buy-ins from senior stakeholders. Effectively use 80/20 to identify

projects/initiatives with biggest impact

● Experience in working with Engineering to drive the product roadmap. Ability to

organize, manage, and prioritize tasks with engineering through multiple product

release cycles

● Strong analytical skills with hands-on experience working with large datasets;

proficiency in SQL, Python, and BigQuery for data analysis, experimentation, and

insight generation

We’re Hiring: Product Manager – Farm Animals (MEA region)

Location: Borivali, Mumbai

Company: Virbac India

Work Mode: Work from Office

At Virbac India , we are looking for a Product Manager – Farm Animals (MEA region) to handle Farm Animals portfolio (Poultry, Aqua & Ruminant) and drive strategic marketing initiatives, product launches, and market expansion.

This role is ideal for professionals with a veterinary background and strong marketing expertise who are passionate about advancing animal health and livestock productivity .

What You’ll Be Responsible For

Strategic Portfolio Management

• Develop and execute annual marketing plans for the assigned product portfolio

• Monitor market trends, customer needs, and competitor activities

• Manage product P&L, pricing strategy, and marketing budgets

Product Launch & Lifecycle Management

• Lead end-to-end product launches , including go-to-market strategy and positioning

• Build strong value propositions to differentiate products in the market

• Manage product lifecycle strategies ,

Group Product Manager (GPM)

Department: Marketing

Location: Bengaluru / Pan India

Experience: 8–15 Years

Industry Preference: Pharmaceutical (Nephrology / Urology preferred)

About the Role

The Group Product Manager (GPM) will lead the strategic planning and execution of marketing initiatives across multiple product portfolios. This role requires strong leadership, market insight, and cross-functional collaboration to drive brand growth and market share.

Key ResponsibilitiesStrategic Planning

• Develop and implement marketing strategies for assigned product portfolios
• Analyze market trends, competitor activities, and customer insights
• Identify growth opportunities and new product positioning strategies

Brand Management

• Own end-to-end lifecycle of brands/products
• Drive brand planning, positioning, and owning
• Monitor product performance and optimize campaigns accordingly

Team Leadership

• Lead and mentor Product Managers/Assistant Product Managers
• Ensure alignment with organizational goals and timelines
• Build a high-performance marketing team

Marketing Execution

• Plan and execute promotional campaigns, CME activities, and digital initiatives
• Collaborate with sales teams to ensure effective impleme

About KeyValue

KeyValue is a premier global AI-driven product development hub, dedicated to transforming ideas into scalable and impactful software products. With expertise across diverse industries, we deliver high-quality solutions with the power of AI and automation. As an AI-first organisation, we strive to push the boundaries of technology, offering accelerated, flexible, and cost-effective product development.

We have ideated, conceived, strategized and built some of the globe’s most innovative Fintech, Payments, Financial Services, Digital Commerce, Madtech, Edtech, Socialtech, Logistics, High Technology, Blockchain, Crypto, NFT and Healthcare companies, helping them conceive, scale, pivot, and enhance their businesses.

KeyValue’s mission is to be the world’s most trusted product development hub – delivering high-value outcomes for start-ups & scale-ups – with a talented skilled team – in a thriving and inclusive culture.

We are looking for a Product Manager who is passionate about building products that customers love. You will join a young and fast-paced environment and work with cross-functional teams to design, build and roll-out products.

What you will do:

• Manage from concept, to design, sample production, testing, forecast and finally product end of life.
• Drive the execution of all product lifecycle processes for products, including product research

About Tekion:

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

We are seeking a driven, technically fluent Senior Product Manager to join our Integration Platform Team . This role is ideal for someone passionate about building robust, developer-friendly platforms that connect APIs, products, and third-party services—with a strong emphasis on pioneering AI-driven integrations to automate workflows, enhance data intelligence, and unlock predictive capabilities across our ecosystem. You will help shape the infrastructure and tools powering integrations, all while championing innovation, reliabil

About Triomics:

Triomics is building the agentic AI layer for oncology EHRs. Cancer hospitals spend billions on highly trained staff manually reading unstructured patient records such as pathology reports, clinical notes, genomic panels to power workflows like trial matching, registry curation, visit prep, and quality reporting. We replace that manual work with task-driven AI agents that sit inside the EMR and process records with >95% accuracy, at scale, in real time.

We have grown 10x in the last one year and are processing millions of documents monthly.

Role:

We’re looking for an AI Product Manager who can operate at the intersection of LLM engineering, oncology data, and product thinking. This is not a traditional PM role where you write specs and hand them off. You’ll be expected to deeply understand the AI systems you’re building, get your hands dirty with prototypes, and work shoulder-to-shoulder with our NLP and AI engineering teams to ship reliable, production-grade AI agents.

Responsibilities:

• Own the AI agent problem decomposition: Deeply understand LLM-based agents in healthcare. Deconstruct complex clinical research into well-defined agent tasks. Define reliability, evaluation metrics, run evals, and iterate on results end-to-end.
• Go deep on oncology data and problem formulation: Gain a deep understanding of cancer patient data (pathology, t

About QpiAI

At QPiAI, we are leading the effort to discover optimal AI and Quantum systems in Life sciences, Healthcare, Transportation, Finance, Industrial, and Space technologies. QPiAI is building a full stack Enterprise Quantum Computers. QPiAI Quantum hardware team is responsible for designing and characterization of Quantum Processor, Cryogenic Quantum Control Circuits, RF Control Hardware, and QPiAI ASGP.

Overview

We are seeking a dynamic and experienced Product Manager to lead the development and lifecycle of our products. This role involves defining product strategies, collaborating with cross-functional teams, and ensuring successful product delivery that aligns with customer needs and business objectives.

Key Responsibilities

1. Product Strategy & Vision

• Develop and communicate a clear product vision and strategy that aligns with company goals.
• Conduct market research and competitive analysis to identify opportunities and threats.
• Define product goals, KPIs, and success metrics to guide development and measure performance.

2. Product Development & Roadmap

• Create and maintain a product roadmap that outlines product development and evolution.
• Define detailed product requirements and specifications.
• Prioritize features, enhancements, and bug fixes based on customer needs and business goals.
  

  QpiAI

  

  5 days ago