Helix - Penetration Tester

Looking for details about our benefits? You can learn more about them by clicking HERE

This Is Helix. Powered by You. At BMC Helix, we don’t do ordinary. We’re the AI-native engine behind the world’s most forward-thinking IT organizations, helping them focus on what matters most. What are we passionate about? We're here to reset the economics of enterprise IT and help others realize the ROI of AI. We are a mix of curious minds, creative thinkers, and courageous builders who believe tech should change the game—not just play it. We celebrate wins, support each other, and laugh a lot. We are the change makers. With decades of leadership and established trust in IT service and operations management, we’re scaling with purpose—through organic innovation, strategic acquisitions, and relentless R&D. Our open-first Agentic AI platform empowers autonomous agents to drive real outcomes with speed, accountability, and precision. We are laser-focused on delivering real value to our customers by accelerating innovation and the application of applying agentic AI in digital service and operations management for IT organizations around the world.

BMC Helix is looking for a motivated and skilled individual to join the Product Security Group. This is a senior technical position in the team. The candidate will be responsible for engaging with various product teams on security architecture reviews, SaaS security, penetration testing. A penetration tester plays a crucial role in safeguarding an organization's digital assets and information by proactively identifying and addressing security weaknesses. This role requires a high level of technical expertise, ethical conduct, and a commitment to continuous improvement in the field of cybersecurity.

Role

BMC is looking for an Penetration tester to join our amazing Product security team! Here is how, through this exciting role, YOU will contribute to BMC's and your own success:

• Conduct thorough vulnerability assessments of applications and systems using various tools and techniques.
• Execute penetration tests to simulate real-world cyberattacks, identifying weaknesses and vulnerabilities.
• Provide expert guidance on application security best practices.
• Research and develop new penetration testing methodologies, tools, and techniques.

To ensure you’re set up for success, you will bring the following skillset & experience:

• 5+ years of experience in product security (web, mobile, API, cloud, infrastructure, and container security) or equivalent skillset.
• Penetration testing experience is essential; prior participation in bug bounty programs is a plus.
• Proficiency with hacking tools and penetration testing frameworks (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
• Expertise in web application security testing, including knowledge of OWASP Top Ten vulnerabilities.
• Experience identifying and assessing vulnerabilities such as SQL injection, XSS, CSRF, and more.
• Proficiency in exploiting vulnerabilities to gain unauthorized access and assess attack impact.
• Understanding of vulnerability scoring systems (e.g., CVSS) for prioritizing findings.
• Ability to think creatively and analytically to identify and exploit vulnerabilities.
• Strong problem-solving skills when encountering unexpected challenges during testing.
• Excellent verbal and written communication skills for conveying technical details to both technical and non-technical stakeholders.
• Meticulous attention to detail in documenting findings and creating reports.
• Effective time management skills to meet project deadlines and testing schedules.
• High level of integrity and professionalism, with the ability to work under pressure while maintaining confidentiality.

Whilst these are nice to have, our team can help you develop in the following skills:

• Hands-on technical experience with cloud security solutions for leading cloud service providers (e.g., AWS).
• Experience with secure code review (SAST) tools for languages such as C/C++, Java, and Python, and relevant frameworks.

Why Work Here? Because You’ll Matter. We’re not hiring for roles—we’re hiring for impact. At Helix, you’ll solve hard problems, build smart solutions, and work with people who challenge and champion you. You’ll see your ideas come to life—and your work make a difference. We believe in trust, transparency, and grit. Our culture is inclusive, flexible, and built for people who want to stretch themselves - and support others doing the same. Whether you’re remote or in-office, you’ll find space to show up fully and contribute meaningfully. You won’t be boxed in—you’ll be backed up. Make Your Mark At Helix If Helix excites you but you're unsure if you meet every qualification, apply anyway. We value diverse perspectives and believe the best ideas come from everywhere. EEOC Statement Helix is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender, gender expression, gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status asa protected veteran. If you need a reasonable accommodation for any part of the application and hiring process, visit the accommodation request page.

BMC Helix maintains a strict policy of not requesting any form of payment in exchange for employment opportunities, upholding a fair and ethical hiring process.

At HELIX we believe in pay transparency and have set the midpoint of the salary band for this role at 2,841,000 INR. Actual salaries depend on a wide range of factors that are considered in making compensation decisions, including but not limited to skill sets; experience and training, licensure, and certifications; and other business and organizational needs.

The salary listed is just one component of HELIX's employee compensation package. Other rewards may include a variable plan and country specific benefits.

We are committed to ensuring that our employees are paid fairly and equitably, and that we are transparent about our compensation practices.

(Returnship@BMC) Had a break in your career? No worries. This role is eligible for candidates who have taken a break in their career and want to re-enter the workforce. If your expertise matches the above job, visit to [1] https://bmcrecruit.avature.net/returnship know more and how to apply. References Visible links 1. https://bmcrecruit.avature.net/returnship