Presales Engineer

About our client: They offer an AgenticAI platform for autonomous penetration testing and red teaming across Web, API, and infrastructure. It discovers shadow assets and web applications, safely validates what is exploitable, and connects findings into multi-stage attack paths with near-zero false positives. Unlike traditional scanners, it discovers credential reuse, business-logic flaws, privilege escalation, and app-to-app or app-to-network lateral movement.

It can operate autonomously or with expert-in-the-loop validation.

Role: Pre-Sales Solutions Engineer, Offensive Security

Location: Mumbai/Bangalore

Offensive Security G Solution Expertise

• Own technical discovery for enterprise opportunities across Web, API, infrastructure, ASM, CART, penetration testing, and red-team validation use cases.
• Design and run controlled POCs with clear scope, success criteria, rules of engagement, exclusions, safety boundaries, test windows, credentials, and expected outcomes.
• Demonstrate capabilities across asset discovery, shadow asset identification, Web/API testing, exploit validation, evidence review, attack-path analysis, reporting, and remediation workflows.
• Explain the difference between vulnerability detection, exploit validation, attack simulation, exposure management, BAS, DAST, PTaaS, manual pentesting, and autonomous penetration testing.
• Handle technical objections around false positives, false negatives, probabilistic coverage, production safety, scope limitations, repeatability, and evidencequality.
• Understand and explain Web and API security issues including authentication flaws, authorisation bypass, business-logic vulnerabilities, credential reuse, privilege escalation, broken access control, insecure APIs, and app-to-infrastructure attack paths.
• Engage confidently on OWASP Top 10, OWASP API Top 10, MITRE ATT&CK, PTES, red-team methodology, vulnerability management, and enterprise security validation practices.
• Address enterprise requirements around deployment model, data residency, privacy, auditability, access control, integrations, reporting, and governance.
• Support integrations and workflow discussions involving Jira, ServiceNow, SIEM, EDR, vulnerability management platforms, ticketing systems, and security reporting processes.
• Explain how AI-assisted offensive security can be controlled, bounded, audited, and safely used in enterprise environments.
• Prepare technical proposals, solution notes, POC plans, RFP/RFI responses, architecture inputs,executive summaries, and technical debriefs.
• Provide structured feedback to product and engineering based on customer objections, competitive gaps, POC outcomes, and recurring field requirements.

Requirement:

• 5 to 10 years in pre-sales, sales engineering, solutions consulting, offensive security consulting, AppSec, red teaming,or enterprise cybersecurity SaaS.
• Strong hands-on understanding of Web application security, API security, infrastructure testing, penetration testing, attacksurface discovery, vulnerability validation, and offensive security workflows.
• Proven ability to run enterprise demos, POCs, technical discovery, RFP/RFI responses, and customer objection handling.
• Ability to engage both technical practitioners and senior security leaders. Workingknowledge of cloud security across AWS, Azure, or GCP.
• Familiarity with common security tools such as SIEM, EDR, vulnerability scanners, DAST tools, ASM platforms, ticketing systems, and security reporting workflows.
• Ability to write high-quality technical and executive-facing documents.
• A Bachelorʼs degree or formal qualification in Computer Science, Engineering, Information Security, or a related field is welcome, but not mandatory. Proven skill, hands-on cybersecurity depth, and relevant enterprise pre-sales experience matter more than academic credentials.

Preferred Experience

• Prior experience with offensive security platforms, ASM/EASM, BAS, PTaaS, DAST, vulnerability management, AppSec, red-team automation, or exposure management products.
• Experience with regulated industries such as BFSI, telecom, healthcare, government, or large technology enterprises.
• Certifications such as OSCP,OSWE, CEH, CISSP,CREST, AWS Security Specialty, or equivalent practical credentials.
• Basic scripting or automation experience in Python, Bash, PowerShell, or similar. Experience in a startup or high-growth cybersecurity product company.

Interested candidates may share their resume at [email protected].