Vulnerability, Accessibility & Inclusion Lead

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. About The role As a Vulnerability Management Engineer, you will support the identification, assessment, prioritization, and remediation of vulnerabilities across applications and infrastructure. Working under the guidance of senior team members, you will assist in understanding how vulnerable dependencies enter an application, identifying remediation options, and engaging with engineering teams to track fixes. You will contribute to the maintenance of internal vulnerability-management tools, such as scripts, documentation, and reporting. The ideal candidate will have a desire to grow their AppSec expertise, will be eager to learn about modern security tooling and automation, and will be comfortable using AI tools like Claude to assist with documentation, investigation, and scripting tasks while following company security and data-handling requirements. What you’ll do Perform regular vulnerability assessments using different tools. Regularly drive remediation and reporting of cataloged vulnerabilities. Assess discovered vulnerabilities and properly prioritize their scope, impact and necessary response actions. Conduct security reviews of our products and production infrastructure. Contribute to vulnerability management, application security and/or offensive/red-team operations. Engage in security audit

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Vulnerability Analyst Overview Mastercard is seeking a Senior Vulnerability Analyst to manage the Bug Bounty Program and perform advanced application security testing across web, mobile, and API environments. This role is responsible for validating externally reported vulnerabilities, conducting penetration testing, partnering with engineering teams on remediation, and helping strengthen Mastercard's security posture through proactive security assessments and vulnerability management. Role • Manage the Bug Bounty Program, including vulnerability intake, validation, triage, and researcher engagement. • Conduct penetration testing of web, mobile, and API-based applications. • Assess risk, prioritize findings, and provide remediation guidance. • Partner with product and engineering teams to drive timely remediation and validate fixes. • Develop reporting and metrics to measure program effectiveness and communicate risk. All About You • At least 3 years of experience in application security and penetration testing • Strong knowledge of web, mobile, and API security, including OWASP Top 10 risks. • Hands-on experience with tools such as Burp Suite, OWASP ZAP, or similar testing platforms. • Ability to assess vulnerabilities, communicate risk, and provide actionable remediation gu

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, and applications in any location. Distributed across 200+ public data centers globally and thousands of private sites at the edge, the SASE-based Zero Trust Exchange is the world’s largest in-line cloud security platform. We believe the future of work is Human + AI and are building an AI-native enterprise where human potential is amplified by machine intelligence to solve the world’s hardest security challenges. Driven by deep customer obsession, we are committed to the mission, outcome, and to each other. We bring these commitments to life through three core behaviors: ownership and collaboration, trust through outcomes and impact, and a challenge culture with ongoing feedback. Ready to make an impact at the company pioneering security transformation in the AI era? Join us at Zscaler. Role We are looking for a Principal Engineer, Vulnerability & Exposure Management to join our team. This is a hybrid role, reporting to the Senior Manager, Information Security Engineering in the Product Security department. This critical role helps modernize how we discover, prioritize, and reduce security exposure across infrastructure, cloud, applications, APIs, endpoints, containers, and internet-facing assets. As an individual contributor, you will operate both strategically and technically to define the operating model, build scalable workflows, influence engineering teams, and dive deep into findings, coverage gaps, scanner limitations, and remediation paths with a strong builder mindset. What you’ll do (Role Expectations) Lead comprehensive vulnerability and exposure management initiatives across infrastructure, cloud, APIs, and containers, evolving the function from a traditional reporting role into a high-leve

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members across UK and India Over $300 million raised in funding Over 2,800 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE TEAM: The Product Security team at Tide is responsible for embedding security across the full product surface, from secure design and threat modelling through to application-layer controls and vulnerability management. Within Product Security, the Remediation Operations function owns the day-to-day engine of Tide's vulnerability management programme: turning a high volume of findings from across our tooling estate into clear, prioritised, actionable work for engineering and IT teams. This role sits at the heart of that function. You will be the connective tissue between security tooling and the teams who fix things, making sure the right vulnerabilities reach the right people with the right context, and that the

A BOUT TIDE At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. Tide facts: Tide is available for UK, Indian, German and French SMEs Over 2 million members across UK and India Over $300 million raised in funding Over 2,800 Tideans globally Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ABOUT THE TEAM: The Product Security team at Tide is responsible for embedding security across the full product surface, from secure design and threat modelling through to application-layer controls and vulnerability management. Within Product Security, the Remediation Operations function owns the day-to-day engine of Tide's vulnerability management programme: turning a high volume of findings from across our tooling estate into clear, prioritised, actionable work for engineering and IT teams. This role sits at the heart of that function. You will be the connective tissue between security tooling and the teams who fix things, making sure the right vulnerabilities reach the right people with the right context, and that the

Junior Consultant – Vulnerability Assessment, Penetration Testing & Red Teaming Location: Clearwater Pune, WFO Experience: 1–3 years Employment Type: Full-time Department: Cybersecurity / Information Security Reporting To: Senior Consultant / Team Lead About the Role Clearwater is looking for a Junior Consultant – Vulnerability Assessment, Penetration Testing (VAPT) & Red Teaming to join our consulting services team. The role will support the delivery of vulnerability assessments, penetration testing, application and infrastructure security assessments, and red team engagements for clients across different technology environments. The ideal candidate should have a strong foundation in cybersecurity, networking, operating systems and common security testing methodologies, along with a willingness to continuously learn and develop offensive security skills. Key Responsibilities Vulnerability Assessment & Penetration Testing Assist in conducting vulnerability assessments and penetration tests across: Web applications and APIs Mobile applications Network and infrastructure environments Cloud environments Internal and external networks Wireless environments, where applicable Perform reconnaissance, enumeration, vulnerability identification and validation. Identify and safely validate security weaknesses using manual and automated techniques. Assist with exploitation and post-exploitation activities under approved engagement scopes. Conduct security testing in accordance with established methodologies such as OWASP, PTES and NIST, as applicable. Analyse scan results and distinguish genuine vulnerabilities from false positives. Red Teaming Support red team and adversary simulation engagements under the guidance of senior team members. Assist with reconnaissance, attack-path identification, initial access, privilege escalation, lateral movement and other approved activities. Develop an understanding of adversary tactics, techni