Find Your Dream Testing Job in India

Job Description - Advance Validation Engineer (Software Testing Validation)

Position Details

Role: Software Testing Validation

Position: Advance Validation Engineer

Location: Hinjewadi, Pune

Experience: 7 to 10 Years

Notice Period: Immediate

Qualification: B.E / B.Tech / M.E / M.Tech in Electronics or related field

Role Summary

We are looking for an experienced Advance Validation Engineer to lead verification and validation activities for automotive electronics, with a strong focus on infotainment systems. The candidate will be responsible for ensuring product quality through robust testing strategies, automation, and system-level validation.

Key Responsibilities

Perform end-to-end validation of automotive electronic products

Develop and execute test plans, test cases, and validation strategies

Validate infotainment features such as:

Connected Services

EV Charging

Bluetooth, Media, Tuner

CAN, UDS, Cybersecurity

Power Management

Conduct manual and vehicle-level testing

Review and enhance Design Validation Plans (DVP)

Debug issues and perform root cause analysis

Collaborate with development teams for release planning and scheduling

Perform peer reviews and mentor junior engineers

Maintain documentation, reports, and lesson learned records

Ensure compliance with automotive standards and project timelines

Required Skills & Competencies

Must-Have Skills:

Strong experience in Automotive Verification & Validation (V&V)

Hands-on experience in Infotainment Testing (minimum 3 years)

Expertise in test case creation & execution from requirements

Knowledge of automotive protocols: CAN, LIN, UDS

Experience with tools & technologies:

CANoe / Vector tools

ECU flashing & debugging

Python scripting & CAPL automation

Configuration tools: JIRA, DOORS, ALM, Git, Gerrit, Confluence

Basic knowledge of C++ / Embedded C

Experience in test setup design and execution

Strong understanding of testing techniques & methodologies

Exposure to Linux environment

Strong documentation & presentation skills

Good to Have:

Experience with debuggers (Trace32, J-Link, Green Hills, NXP)

ISTQB Certification

Knowledge of ASPICE process

Experience in defect management systems

Awareness of latest automotive technology trends

Behavioral Competencies:

Strong team player with leadership skills

Excellent communication and stakeholder management

Ability to work in agile/sprint environments

Proactive, self-motivated, and goal-oriented

Strong analytical and problem-solving mindset

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

Senior Product Manager - Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PCI DSS, SOC 2, ISO 27001) while providing actionable security insights that reduce risk.

Responsibilities:

• Product Strategy & Vision: Develop and execute a comprehensive product strategy for VikingCloud's managed security testing services, including penetration testing, vulnerability assessments, web application testing, mobile app testing, API testing, phishing simulations, social engineering assessments, and automated testing. Define the product vision that balances automation and scalability with the technical rigor required for professional security testing.
• AI Security Testing (AISec): Develop testing methodologies and a comprehensive product strategy for Larege Language Models (LLMs) AI Agents, Chatbots, and other AI powered technologies. This includes an "AI Red Teaming" strategy and packages for testing the robustness of customer-facing AI applications.
• PTaaS Platform Development: Lead the development of VikingCloud's Penetration Testing as a Service (PTaaS) platform, creating modern delivery mechanisms that provide continuous testing, real-time reporting, seamless remediation tracking, and collaborative workflows between testers and customers. Define platform requirements for test scoping, scheduling, execution tracking, finding management, retesting, and certification delivery.
• Testing Methodology & Standards: Ensure all security testing services adhere to industry-recognized methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, NIST SP 800-115, and PCI DSS testing requirements. Maintain current knowledge of CREST accreditation requirements and ensure VikingCloud's services meet or exceed these standards. Define quality assurance processes for testing deliverables.
• Certification & Compliance Alignment: Build security testing services that directly support customer compliance requirements including PCI DSS (ASV scanning, segmentation testing, penetration testing), SOC 2 Type II (security testing evidence), ISO 27001, NIST frameworks, and industry-specific regulations. Position testing services as essential compliance components that provide both security value and audit evidence.
• Roadmap Planning & Prioritization: Create and maintain detailed product roadmaps for testing services and PTaaS platform capabilities. Prioritize features and service enhancements based on customer feedback, compliance requirements, competitive analysis, revenue potential, and operational efficiency gains. Balance automation initiatives with maintaining high-quality manual testing where required.
• Phishing & Social Engineering Programs: Develop comprehensive phishing simulation and security awareness testing capabilities including campaign management, template libraries, user tracking, training integration, and reporting dashboards. Create social engineering testing services including vishing, smishing, physical security testing, and pretexting scenarios tailored to different industries and threat models.
• Service Delivery & Scalability: Design service delivery models that enable VikingCloud to scale testing services efficiently while maintaining quality. Define when to use internal testers versus third-party partners, automation versus manual testing, and on-demand versus scheduled assessments. Create standardized testing packages for common use cases while allowing customization for complex environments.
• Vulnerability Management Integration: Integrate security testing services with VikingCloud's existing vulnerability scanning and management capabilities. Create workflows that enable customers to move seamlessly from continuous scanning to targeted penetration testing to remediation verification. Build unified vulnerability management dashboards that combine scan results, pen test findings, and remediation status.

Qualifications:

• Bachelor's degree in computer science, cybersecurity, information security, or related technical field required; advanced degree (M.S. in Cybersecurity) or MBA is a plus.
• 15-20 years of experience in offensive security, penetration testing, or security consulting with at least 4-5 years in product management or service delivery leadership roles.
• Hands-on penetration testing experience including web applications, APIs, mobile applications, network infrastructure, wireless networks, and cloud environments. Direct experience conducting security assessments, not just managing testing programs.
• Deep understanding of offensive security methodologies and frameworks including CREST standards, Penetration Testing Execution Standard (PTES), OWASP Testing Guide, OWASP Top 10 and OWASP Top 10 for LLMs, SANS Top 25, and MITRE ATT&CK and ATLAS frameworks.
• Strong knowledge of CREST certification pathways and accreditation requirements including CREST Registered Tester (CRT), CREST Certified Tester (CCT), CREST Practitioner Security Analyst (CPSA), and CREST infrastructure, application, and specialist certifications. Understanding of how CREST accreditation differentiates testing services in the market.
• Professional security certifications strongly preferred including OSCP (Offensive Security Certified Professional), GPEN (GIAC Penetration Tester), GWAPT (GIAC Web Application Penetration Tester), CEH (Certified Ethical Hacker), or CREST certifications. Multiple certifications demonstrating breadth of expertise are highly valuable.
• Experience with compliance-driven security testing including PCI DSS penetration testing requirements (Requirement 11.4), PCI DSS Approved Scanning Vendor (ASV) program, SOC 2 security testing, ISO 27001 testing requirements, and other regulatory frameworks.
• Familiarity with penetration testing tools and platforms including Burp Suite, Metasploit, Cobalt Strike, Nmap, Nessus, OWASP ZAP, Kali Linux, and emerging automated testing tools. Understanding of when automation adds value versus when manual testing is required.
• Experience with AI-augmented security testing, managing the security of AI/ML pipelines, prompt engineering for security testing, and use of AI agents in automated vulnerability discovery.
• Knowledge of the EU AI Act, NIST AI Risk Management Framework, and other emerging AI regulations
• Experience with PTaaS platforms or building security testing delivery platforms. Understanding of modern testing workflows including continuous testing, API-driven integrations, real-time reporting, and collaborative remediation tracking.
• Product management experience defining product roadmaps, gathering requirements, working with engineering teams, and launching new capabilities. Proficiency with Agile development methodologies and product management tools.
• Strong understanding of web application architectures, APIs (REST, GraphQL), mobile platforms (iOS, Android), cloud environments (AWS, Azure, GCP), and modern development practices (DevOps, CI/CD) as they relate to security testing.
• Knowledge of vulnerability management, including vulnerability scoring (CVSS), prioritization frameworks, remediation workflows, and integration with ticketing systems and security information systems.
• Experience with phishing simulation platforms and security awareness training programs. Understanding of social engineering techniques and testing methodologies.
• Excellent technical writing skills with ability to create clear, actionable security assessment reports for both technical and executive audiences. Experience translating technical vulnerabilities into business risk.
• Customer-facing experience including scoping security assessments, conducting kickoff meetings, presenting findings, and providing remediation guidance. Ability to build trusted advisor relationships with CISOs and security teams.
• Strong analytical and problem-solving skills with ability to make data-driven decisions about product priorities, service delivery models, and resource allocation.
• Business acumen with understanding of services business models, pricing strategies, cost structures, and profitability drivers. Experience with revenue forecasting and financial planning for professional services.

We are looking for a mid to senior level (3+ years) candidate in the Software Testing Engineering Lead role. The role will primarily involve end to end testing of Algorithmic trading software, large tick data sets, trading and market connectivity. You will be part of the Development team and work closely with developers and project stakeholders to deliver cutting-edge quality products to meet the Firm’s trading needs. 

A successful candidate will be an individual contributor who is passionate in implementing good quality tests both manual and automated and taking ownership in improving software development process and delivering high quality products in the area of algorithmic trading. 

Required Skills: 

• Ensure high quality software delivery though leading, writing, executing and automating QA testing 

• Experience in Testing Engineering in FinTech, manual or automation 

• Python and Shell scripting to automate the task 

• Excellent analytical problem-solving ability 

• Excellent communication skills 

• Highly motivated with ability to multitask 

Desired Skills: 

• Prior experience in financial trading platform 

• Experience in databases, preferably in KDB+/ Q 

• Experience in Quick FIX Tips: Provide a summary of the role, what success in the position looks like, and how this role fits into the organization overall.

Job Title: US Healthcare Claims Tester (Functional + Automation)

Location: All Ascendion Locations (Pune, Bengaluru, Chennai, Vadodara and Hyderabad)

Experience: 6+ Years

Employment Type: Full-time

Job Summary:

We are seeking a QA Tester with strong experience in US Healthcare Claims processing and a mix of functional and automation testing skills. The ideal candidate should have hands-on experience in validating end-to-end claims lifecycle and ensuring compliance with US healthcare standards.

Key Responsibilities:

• Perform functional testing across the complete claims lifecycle:
• Claims Intake
• Adjudication
• Pricing
• Payment
• Denials & Appeals
• Design and execute test cases, test scenarios, and test plans.
• Develop and maintain automation test scripts using tools like Selenium, Cypress, or Playwright.
• Validate EDI transactions such as:
• 837 (Claims submission)
• 835 (Remittance advice)
• Perform API testing using Postman or Rest Assured.
• Validate business rules for ICD-10, CPT, HCPCS coding.
• Conduct regression, integration, and UAT support testing.
• Log and track defects using Jira.
• Ensure compliance with HIPAA guidelines.
• Collaborate with BA, Dev, and business teams to clarify requirements.

Asst. Manager – Testing & Protection

Location - Noida

Role Summary

Key responsibility is to monitor, supervise and control operation and protection testing activities for power transmission project installed in IndiGrid assets to deliver highest reliability and availability of transmission system.

Reporting Manager

Direct Report – Lead Protection / Operation Head

Other Work Relations

Functional Heads / Managers (Regulatory, Legal, Business Development, Asset Management/ Site O&M M&A, Finance)

Role Grade- Asst. Manager

Role’s Key Responsibilities

This position is responsible for coordinating, scheduling, and overseeing the operations activities of the power transmission and substation system.

The following shall be key responsibilities to be delivered to meet O&M objectives.

• to supervise and overall Testing and Protection activities for HV/EHV power transmission lines (~132kv – 765kv) and substations and related components and accessories of IndiGrid Assets.
• coordinates and supervise testing per O&M SOP’s, OEM recommendations and best in class prudent industry practices to ensure highest availability, reliability at utmost operational efficiency.
• with maintenance teams for preventive and predictive maintenance activities and for managing unplanned activities or emergency p

Senior AIS Testing Professionals – Multiple Openings

Location: Siemens Kalwa Works Airoli, Mumbai

Industry: Medium Voltage Switchgear Manufacturing

Product: AIS Panels (3.3kV – 36kV)

We are hiring experienced professionals in Air Insulated Switchgear (AIS) Testing across multiple seniority levels — from hands-on testing engineers to team leaders and managers.

If you have worked on MV switchgear testing, FAT, protection systems, or panel testing, we would like to connect.

Key Responsibilities

Testing & Technical Execution

• Perform routine & type testing of MV AIS panels as per IEC/IS standards
• Conduct IR, CRM, HV withstand, functional & interlock tests
• Troubleshoot testing issues and support resolution
• Read SLD, wiring diagrams, protection schemes
• Verify CT/PT polarity, relay logic and trip circuits
• Ensure readiness of panels before FAT / customer inspection
• Demonstrate FAT testing to customers

Safety, Quality & Compliance

• Ensure compliance with EHS, PTW, HIRA processes
• Follow work instructions, quality manuals and testing protocols
• Maintain calibration and records of testing equipment
• Participate in ISO, EHS and factory audits
• Support LEAN / productivity improvement initiatives
<

We have immediate opportunity for VisionPLUS Tester

Job Role: VisionPLUS Tester

Job Location: Chennai/ Bangalore/ Hyderabad/ Pune

Experience- 2+Years

About Company:

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 13,950+, and has 52 offices in 20 countries within key global markets. For more information on the company, please visit our website or LinkedIn community.

Diversity, Equity, and Inclusion

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and an affirmative-action employer. Our Diversity, Equity,

Embark on a fulfilling journey at Škoda Auto Volkswagen India (SAVWIPL), where were powering ahead into the future of mobility with unwavering determination. Headquartered in Pune, SAVWIPL manages the India region of the Volkswagen Groups five prestigious brands Škoda, Volkswagen, Audi, Porsche, and Lamborghini. As a leading European car maker in India, we offer a promising career growth, constant innovation, and a balanced work-life environment. Our consistent pursuit of workplace excellence has garnered us numerous accolades including ‘Great Place to Work’, ‘Top Employer’, and HR Asia’s ‘Best Companies to Work for in Asia’ in 2023. At the forefront of automotive innovation, we operate two cutting-edge manufacturing facilities in India - at Chakan, Pune, and Shendra, Chhatrapati Sambhajinagar (formerly known as Aurangabad). With a rich legacy spanning over two decades, SAVWIPL boasts a wide spectrum of cars in its portfolio, ranging from conventional ICE range to electrifying BEV models.

Open the door to boundless opportunities and learn more about SAVWIPL by visiting . Regardless of your background, age, or identity, we welcome all talents to join us on this exciting journey towards shaping the future of mobility.

Position Name: Testing Engineer - Front End

Department: Research and Development

Reporting Position: Team Lead Set V

Years of Experience: > 8 to 14 yrs.

<

Who we are:

Yanmar, a global leader since 1912, excels in innovative solutions across agriculture, marine, and industrial sectors. Yanmar Engine Manufacturing India (YEMI) Pvt. Ltd is a 100% owned subsidiary of Yanmar Japan, established in 2019. Our culture thrives on innovation , efficiency , and sustainability.

What we do:

YEMI primarily focuses on manufacturing of Industrial Engines and sales and service of the Industrial Engines/Agricultural Products/ Marine (Small – Medium & Large) Engines. Additionally, YEMI is running a full-fledged R&D center, with the vision of developing a global R&D center in India and to provide the cost and technological merits of India to the Yanmar Group.

What is in for you:

Employees at YEMI benefit from a collaborative work environment, continuous learning opportunities, global exposure, a culture that promotes HANASAKA (let the people bloom) and a commitment to sustainability through initiatives like solar energy and rainwater harvesting. We also offer a comprehensive benefits package, including health and well-being , equal employment opportunities and policies that are benchmark for work-life balance .

Essential Duties and Responsibilities:

• Performing physical tests like draw

Embark on a fulfilling journey at Škoda Auto Volkswagen India (SAVWIPL), where were powering ahead into the future of mobility with unwavering determination. Headquartered in Pune, SAVWIPL manages the India region of the Volkswagen Groups five prestigious brands Škoda, Volkswagen, Audi, Porsche, and Lamborghini. As a leading European car maker in India, we offer a promising career growth, constant innovation, and a balanced work-life environment. Our consistent pursuit of workplace excellence has garnered us numerous accolades including ‘Great Place to Work’, ‘Top Employer’, and HR Asia’s ‘Best Companies to Work for in Asia’ in 2023. At the forefront of automotive innovation, we operate two cutting-edge manufacturing facilities in India - at Chakan, Pune, and Shendra, Chhatrapati Sambhajinagar (formerly known as Aurangabad). With a rich legacy spanning over two decades, SAVWIPL boasts a wide spectrum of cars in its portfolio, ranging from conventional ICE range to electrifying BEV models.

Open the door to boundless opportunities and learn more about SAVWIPL by visiting . Regardless of your background, age, or identity, we welcome all talents to join us on this exciting journey towards shaping the future of mobility.

Position Name: Active Safety Full Vehicle Testing Expert

Functional Area: Research and Development

Qualification: BE/ ME. (Mechanical/Automobile/Aerospace)

Ye

Testing Engineer – Power System Protection

Location: Goa, In

Roles and Responsiblity:

Test Engineer (Protection System) will be responsible for testing of Control and Relay panels used for various voltage levels in India and Abroad for different applications. The incumbent will be responsible for different project phases like understanding client requirement , project specific documents , configuration of numerical relays , testing , and customer inspection (FAT) in factory. Support to Project Management / Engineering / Commissioning team for smooth execution of the project.

Requirement:

• Knowledge & understanding on wiring schematic drawings
• Understanding of Power System Protection philosophy & applications
• Hands-on experience in configuration of Numerical IEDs ( Siemens, ABB, GE, Schneider )
• Hands-on experience on test kits – OMICRON, DOBLE, Megger
• Experience in integration of Numerical IEDs with Substation Automation System (SAS)
• Understanding of client requirements / technical specifications
• Basic knowledge of Substation Automation & Communicati

Key Responsibilities

• Quality Strategy Ownership : Define the end-to-end testing strategy for GenAI applications(e.g., summarization, conversational flows, content generation), including selecting appropriate methodologies for agentic AI systems .
• Mentorship & Team Guidance : Lead and mentor junior QA team members, providing direction on AI-specific testing crafts, prompt engineering, and automation frameworks.
• LLM Evaluation: Validate model outputs for factual accuracy, tone, relevance, and consistency.
• Prompt Engineering & Validation: Test and refine prompt-response workflows to identify hallucinations and edge cases
• Performance Engineering: Evaluate model latency, throughput, token usage, and API response times.

Required Skills & Experience

• Experience: 5-8 years in software testing, with 13 years specialized in testing GenAI/LLM models.
• GenAI Tools: Experience with LLMs (e.g., OpenAI GPT, Claude)
• Cloud Platforms: Familiarity with AWS (Bedrock), Azure (OpenAI) etc.
• Automation Tools: Knowledge of API testing tools (Postman, REST Assured) and CI/CD tools (Jenkins, GitHub Actions), Cypress with typescript.
• QA Fundamentals: Strong understanding of Agile methodologies, functional testing, and defect tracking (Jira)
• Root Cause Analysi

Level of Experience : 8+ years for B.Tech, 5+year for PG (M.Sc. & M. Tech),3+ year for Ph.D

Technical skills: Internal Combustion Engine Testing, Field Trials monitoring, Data analysis, Report writing, Industrial/automotive applications, technical report writing.

Specific Knowledge : Engine components and parts, lubricant formulations, Tribology testing and its correlation with engine testing, Lubricant formulation, Additive Chemistries, IP watch and project management.

Responsibilities

• Know, respect and ensure compliance with the Company's Code of Conduct & HSE policies (HSE and Quality processes of TCAP)
• Conduct technical and scientific studies in line with OneTech F&L objectives within the area of expertise of Engine Testing for ICE and Field Trials (including working on test benches), by evaluating lubricant performance for different application
• Ensure compliance with project framework in terms of deadlines, costs and contractual rules
• Contribute to the technical and scientific support in field of expertise of Engine Testing for ICE and Field Trials
• Perform the statistical analysis of data collecting during engine testing or field trials
• Each study must be concluded in Memo or Technical note
• Coordinate all stakeholders involved in the study, including external resources (third party lab, academics, industrial p

Job Description – Advance Validation Engineer (Software Testing Validation)

Position Details

Role: Software Testing Validation

Position: Advance Validation Engineer

Location: Hinjewadi, Pune

Experience: 7 to 10 Years

Notice Period: Immediate

Qualification: B.E / B.Tech / M.E / M.Tech in Electronics or related field

Role Summary

We are looking for an experienced Advance Validation Engineer to lead verification and validation activities for automotive electronics, with a strong focus on infotainment systems. The candidate will be responsible for ensuring product quality through robust testing strategies, automation, and system-level validation.

Key Responsibilities

Perform end-to-end validation of automotive electronic products

Develop and execute test plans, test cases, and validation strategies

Validate infotainment features such as:

Connected Services

EV Charging

Bluetooth, Media, Tuner

CAN, UDS, Cybersecurity

Power Management

Conduct manual and vehicle-level testing

Review and enhance Design Validation Plans (DVP)

Debug issues and perform root cause analysis

Collaborate with development teams for release planning and scheduling

Perform peer reviews and mentor junior engineers

Maintain documentation, reports, and lesson learned records

Ensure compliance with a

RKE Engineers Pvt.Ltd reputed company offering Erection, Testing & Commissioning Services of Electrical Equipment, looking for "Electrical Relay Testing Engineer".

We are working with prestigious clients like "GAIL,L&T,Reliance,PIL,ONGC,Ultratech Cement,Kribhco,GACL,GSFC,IOCL etc.."

Electrical Relay Testing Engineer - Vacancy : 3 Nos

Education Qualification: DEE/BE Electrical Engineering

Experience : Min. 3 - 5 years of relevant experience in Testing, Commissioning & Programming of Electromechanical / Static / Numerical Relay of any make any type.

Should be ready to travel extensively all over India.

Stationed at Vadodara.

Only Suitable Candidates Please Mail your resume to admins@rkengineer.net

Geo-Chem Laboratories - It is a part of Cotecna Group. We are one of the largest & reputable inspection and testing organizations in India.

We are seeking a driven and experienced Sales Executive to join our team, specializing in Food Laboratory Testing solutions. The ideal candidate will have a strong hunting mindset with a proven ability to identify new business opportunities, build lasting client relationships, and close high-impact deals and contracts.

Location : Pune OR Nagpur

Key Responsibilities

• Developing a deep understanding of the food and Agri commodities markets to effectively target potential clients in need of testing services.
• Establishing strong connections with customers, understanding their needs, and ensuring their satisfaction with the services provided.
• Manage sales activities, including cold calls, sales planning, visits, reports and results. Need to travel in entire region for business purpose.
• Keep up to date with the company’s testing services and effectively communicate their benefits to clients.
• Setting and achieving sales goals to contribute to the company’s revenue objectives by achieving yearly revenue targets.
• Skillfully negotiate contracts and closing agreements to maximize profits while maintaining quality service.
• Study Competitors and their practices to design pricing strategy.
• Prepare rate

We’re Hiring: Functional Quality Specialist - Learning Experience

• Full-Time | Hybrid | Bangalore (Bellandur)

GP Strategies is seeking an experienced Functional Quality Specialist - Learning Experience who can transform complex concepts into clear, engaging, and scalable learning solutions for a global audience.

About GP Strategies

GP Strategies Corporation is a global leader in talent transformation, delivering award‑winning learning and development solutions for more than 55 years. With over 6,000 clients worldwide, GP Strategies provides deep expertise across consulting, learning services, and talent technology.

Learn more:

Key Responsibilities

• The Learning Experience QA Specialist ensures the quality, functionality, and accuracy of learning content before deployment, focusing on testing interactive modules (Articulate Storyline/Rise), and user experience. The job role identifies, documents, and tracks bugs while collaborating with the Learning and Development team to enhance training effectiveness.
• Key Responsibilities
• Functional Testing: Perform rigorous end-to-end testing of eLearning modules to ensure interactivity, triggers, variables, audio, video, and quizzes function correctly.
• Bug Tracking: Identify, log, and track defects, ensuring they are resolved and re-tested before final release.
• Quality Standards: R

Senior Product Manager – Managed Security Testing

Location: Vadodara Office

Shift time: India shift hours

Report to: SVP

Job Description:

As a Senior Product Manager of Managed Security Testing at VikingCloud, you will be responsible for the strategic planning, development, and execution of our offensive security testing services, including penetration testing as a service (PTaaS), vulnerability assessments, phishing simulations, social engineering testing, and specialized security assessments. You will own the product roadmap for VikingCloud's managed security testing portfolio, working closely with our internal security testing teams, third-party testing partners, and customers to deliver high-quality offensive security services that help merchants and financial institutions identify and remediate security weaknesses before attackers can exploit them. This role requires deep understanding of offensive security methodologies, industry certifications and frameworks (CREST, PTES, OWASP, PCI DSS ASV), and the ability to bridge technical security testing with compliance requirements. You will collaborate with cross-functional teams including security consultants, engineering, sales, and customer success to build scalable, automated testing platforms while maintaining the rigor and quality expected from professional security assessments. Your work will directly support customers' compliance programs (PC

We are looking for an experienced Freelance IOT Testing Engineer to join a high-performing engineering team working on scalable products for global enterprise clients.

This role is ideal for professionals currently working in a 100% REMOTE setup and looking to take up a long-term freelance or part-time engagement alongside their primary role with competitive compensation and meaningful additional income.

Company Background

We are a product engineering firm partnering with top-tier global organizations across consulting, fintech, retail, and consumer tech. Our 750+ strong engineering team delivers high-impact solutions across Product and Data Engineering, with deep expertise in Agentic AI, GenAI, RPA, and Full-stack development.

Must Have Skills

• Strong experience in IoT / Edge application testing
• Hands-on with MQTT / messaging systems (pub-sub, brokers, failover)
• Experience in OTA (Over-the-Air) testing – A/B updates, rollback scenarios
• Exposure to connected & air-gapped environments (offline-first systems)
• Expertise in API test automation (REST APIs)
• Experience with Docker & Kubernetes (K3s / MicroK8s preferred)
• Strong in performance & load testing (throughput, latency, queues)
• Experience in test framework design & CI/CD integration


Leading MNC



4 days ago