Job Title: Pre-Sales Solutions Engineer, Offensive Security

Location: Bengaluru

EC-Council is the world’s largest cyber security technical certification body. We operate in 145 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.

Visit us on www.eccouncil.org

Role Overview

Offensive Security & Solution Expertise

Own technical discovery for enterprise opportunities across Web, API, infrastructure, ASM, CART, penetration testing, and red-team validation use cases.

Design and run controlled POCs with clear scope, success criteria, rules of engagement, exclusions, safety boundaries, test windows, credentials, and expected outcomes

Demonstrate FireCompass capabilities across asset discovery, shadow asset identification, Web/API testing, exploit validation, evidence review, attack-path analysis, reporting, and remediation workflows.

Explain the difference between vulnerability detection, exploit validation, attack simulation, exposure management, BAS, DAST, PTaaS, manual pentesting, and autonomous penetration testing.

Handle technical objections around false positives, false negatives, probabilistic coverage, production safety, scope limitations, repeatability, and evidence quality.

Understand and explain Web and API security issues including authentication flaws, authorisation bypass, business-logic vulnerabilities, credential reuse, privilege escalation, broken access control, insecure APIs, and app-to-infrastructure attack paths.

Engage confidently on OWASP Top 10, OWASP API Top 10, MITRE ATT&CK;, PTES, red-team methodology, vulnerability management, and enterprise security validation practices.

Address enterprise requirements around deployment model, data residency, privacy, auditability, access control, integrations, reporting, and governance.

Support integrations and workflow discussions involving Jira, ServiceNow, SIEM, EDR, vulnerability management platforms, ticketing systems, and security reporting processes.

Explain how AI-assisted offensive security can be controlled, bounded, audited, and safely used in enterprise environments.

Prepare technical proposals, solution notes, POC plans, RFP/RFI responses, architecture inputs, executive summaries, and technical debriefs.

Provide structured feedback to product and engineering based on customer objections, competitive gaps, POC outcomes, and recurring field requirements.

Customer Leadership

Operate independently in complex enterprise sales cycles without needing constant technical supervision.

Communicate with equal credibility to CISOs, AppSec engineers, red teams, SOC teams, infrastructure teams, procurement, compliance, and risk stakeholders.

Convert complex offensive security concepts into clear business and technical narratives.

Maintain strong discipline in POC scoping, customer expectation management, evidence interpretation, and post-POC debriefs.

Stay calm and precise under customer challenge, especially when defending autonomous testing, AI-led workflows, exploit validation, and platform limitations.

Write clearly and concisely for technical, executive, and procurement audiences.

Build trust with customers by being technically honest, commercially aware, and outcome-focused.

Collaborate closely with sales, product, engineering, delivery, and partner teams without creating ambiguity in ownership.

Show curiosity, field intensity,



and willingness to learn fast in a category that is still being defined.

Represent FireCompass with maturity in high-stakes meetings, security reviews, RFP defences, competitive bake-offs, and partner-led engagements.

Commercial & Customer Impact

Improve technical win rate by making FireCompass easier to understand, evaluate, trust, and buy.

Increase POC-to-close conversion through better scoping, stronger success criteria, sharper demonstrations, and cleaner technical debriefs.

Position FireCompass against manual pentesting firms, PTaaS providers, BAS platforms, ASM/EASM tools, DAST scanners, vulnerability management platforms, and autonomous testing competitors.

Build reusable demo narratives, objection-handling responses, RFP content, POC templates, and competitive positioning material.

Support enterprise opportunities across India, Middle East, North America, and other strategic markets as required.

Enable channel partners through technical deep dives, joint demos, POC support, and field-ready messaging.

Help customers justify investment through improved coverage, validated findings, reduced manual effort, faster assessment cycles, better evidence, and clearer risk prioritisation.

Protect deal quality by identifying poor-fit use cases, unsafe scopes, unrealistic expectations, and technical gaps early.

Act as a field intelligence source for product roadmap, competitive strategy, sales messaging, and market positioning.

Required Experience

5 to 10 years in pre-sales, sales engineering, solutions consulting, offensive security consulting, AppSec, red teaming, or enterprise cybersecurity SaaS.

Strong hands-on understanding of Web application security, API security, infrastructure testing, penetration testing, attack surface discovery, vulnerability validation, and offensive security workflows.

Proven ability to run enterprise demos, POCs, technical discovery, RFP/RFI responses, and customer objection handling.

Ability to engage both technical practitioners and senior security leaders.

Working knowledge of cloud security across AWS, Azure, or GCP.

Familiarity with common security tools such as SIEM, EDR, vulnerability scanners, DAST tools, ASM platforms, ticketing systems, and security reporting workflows.

Ability to write high-quality technical and executive-facing documents.

A Bachelor’s degree or formal qualification in Computer Science, Engineering, Information Security, or a related field is welcome, but not mandatory. Proven skill, hands-on cybersecurity depth, and relevant enterprise pre-sales experience matter more than academic credentials.

Preferred Experience

Prior experience with offensive security platforms, ASM/EASM, BAS, PTaaS, DAST, vulnerability management, AppSec, red-team automation, or exposure management products.

Experience with regulated industries such as BFSI, telecom, healthcare, government, or large technology enterprises.

Certifications such as OSCP, OSWE, CEH, CISSP, CREST, AWS Security Specialty, or equivalent practical credentials.

Basic scripting or automation experience in Python, Bash, PowerShell, or similar.

Experience In a Startup Or High-growth Cybersecurity Product Company.

Why This Role Is Different





You will not be selling a commodity scanner or a conventional services wrapper. You will help shape how enterprises evaluate and adopt autonomous offensive security.

You will work at the intersection of AI, penetration testing, attack surface management, exploit validation, red-team automation, and enterprise risk reduction.

You will influence the product directly through field feedback, POC outcomes, competitive learnings, and customer requirements.

You will gain exposure to serious enterprise security problems across large customers, regulated industries, and global markets.

You will build rare expertise in a category that is still early and likely to become strategically significant.

Tangible rewards include competitive compensation, performance-linked incentives, potential equity participation where applicable, enterprise customer exposure, and accelerated role growth in a high-impact cybersecurity company.

Intangible rewards include category-building ownership, technical depth, founder-level visibility, strategic customer access, and the opportunity to become one of the early field experts in autonomous offensive security.

Additional Information

EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.

EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at [email protected] and let us know how we can assist.

To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.

If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein.

Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.

Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.

Please review our policy here: EC-Council Privacy Policy- User & company | Data Protection. Submission of your application will be considered as your acceptance of the terms stated above.

📌 Pre-Sales Solutions Engineer, Offensive Security (Mumbai)
🏢 EC-Council
📍 Mumbai