About the Company

About Mitigata Mitigata is India's first AI-native, full-stack cyber resilience company. Most businesses buy security, compliance, and insurance as three separate products from three separate vendors. We bring all three onto one platform, so a single partner can assess a client's risk, help prevent a breach, prove compliance, and cover the financial loss if an incident occurs.

Founded in 2023 and headquartered in Bengaluru, we are a team of 175+ serving 800+ customers across 25+ industries and 6+ countries, including India, the USA, the UAE, the UK, and Singapore. Our broking arm, Mitigata Insurance Brokers Pvt. Ltd., is licensed by IRDAI.

We are backed by Bessemer Venture Partners, Nexus Venture Partners, Titan Capital, WEH Ventures, and Point One Capital, along with founder-angels including Anupam Mittal (Shaadi.com) and Nitish Mittersain (Nazara).

What we do

- Intelligence (Gordon AI): our AI command centre and 24/7 AI Security Operations Center, monitoring and responding across the full stack
- Security: attack surface monitoring, VAPT, threat intelligence, in-house incident response (DFIR), and a marketplace of 500+ security vendors
- Compliance: GRC automation and audit support through Gordon GRC, across ISO, SOC 2, PCI-DSS, DPDPA, GDPR, RBI, SEBI, IRDAI, and more
- Insurance: cyber and other major liability lines, placed faster and priced better because our own security data informs the underwriting

Because these layers share data, each one strengthens the others: security insights inform underwriting, a stronger compliance posture can lower premiums, and the insurance relationship supports incident response. Join us in building the first line of defence for Digital India, with products built in India for the world.

About the Role

Associate Director, Delivery Security Services Location: Bengaluru | Experience: 10+ years | Level: Associate Director or above; final title based on experience

Role Overview: You will lead delivery for our security services practice: VAPT, red teaming, application and cloud security assessments, and incident response.



You will run a team of security consultants, own the quality and timeliness of every engagement, and keep our methodology and reporting at a standard that clients and regulators trust.

Responsibilities

Key Responsibilities

- Own delivery of offensive security and DFIR engagements, from kickoff through final report and retest.
- Lead, hire, and develop a team of testers and incident responders, and manage scheduling, utilisation, and skill development.
- Define and maintain testing methodologies, QA review, and reporting standards.
- Review critical findings and reports before release, and present results to client leadership when needed.
- Lead or oversee incident response engagements, including coordination with client teams, legal counsel, and our insurance claims team.
- Manage tooling, lab environments, and safe testing practices, including rules of engagement and data handling.
- Track and report delivery metrics, including on-time delivery, report quality, retest closure, and client satisfaction.
- Work with solutioning on scoping, and with sales on renewals and follow-on work.

Qualifications

Key Skills & Qualifications:

- Must-Have Requirements

- 10+ years in offensive security or DFIR, with 4+ years leading delivery teams.
- Hands-on depth across web, mobile, API, network, and cloud security testing.
- Experience delivering regulated engagements for BFSI or enterprise clients, with audit-grade reporting.
- Strong people leadership and quality control.
- Sound judgement on safe testing, confidentiality, and evidence handling.

Required Skills

- 10+ years in offensive security or DFIR, with 4+ years leading delivery teams.
- Hands-on depth across web, mobile, API, network,



and cloud security testing.
- Experience delivering regulated engagements for BFSI or enterprise clients, with audit-grade reporting.
- Strong people leadership and quality control.
- Sound judgement on safe testing, confidentiality, and evidence handling.

Preferred Skills

Good to Have

- OSCP, OSEP, OSWE, CRTO, GCFA, GCIH, CREST, or equivalent certifications.
- Experience at a CERT-In empanelled organisation.
- Red teaming and adversary emulation experience.
- Exposure to incident response in the context of cyber insurance claims.

Pay range and compensation package

Competitive compensation, ESOPs, and the opportunity to contribute to work with national impact.

Equal Opportunity Statement

Every candidate is assessed on the same criteria, whatever their background. We handle your personal information with the same care we apply to our clients' data: we collect only what we need and share it only with the people involved in your application.

Additional Information

What We Look For Every role needs strong skills in its craft. Beyond that, the people who thrive at Mitigata tend to share a few traits:

- You care about the problem. Protecting businesses and people motivates you, and the impact of your work matters to you.
- You think from first principles. You question assumptions and reason through recent problems instead of relying only on how things have always been done.
- You take ownership. You care about the outcome, not just the task, and step in where you are needed.
- You act with integrity. You are candid about mistakes and handle confidential information with care. Our clients trust us in their most difficult moments.
- You learn quickly. Threats, regulations, and our products change often. We value how fast you grow as much as where you are today.

How We Hire Our process is structured and built to respect your time. It typically includes a recruiter conversation, a hiring manager conversation, and 3 to 5 interviews, one of which is a practical work sample

📌 AD - Delivery Security Tools (Bengaluru)
🏢 Mitigata™ - Full-Stack Cyber Resilience
📍 Bengaluru