Company Description:

Sofiotic is a cybersecurity company focused on making security a core enabler of innovation rather than a barrier. Founded by industry veterans, Sofiotic replaces fragmented security tools with a unified intelligence platform used by global enterprises across diverse sectors. The platform streamlines vulnerability management, product security, ASPM, and compliance management, supported by full-stack security consulting services.

By consolidating security data into a single interface, Sofiotic simplifies workflows, improves collaboration across engineering teams, and accelerates remediation efforts. The company is committed to helping organizations continuously reduce their attack surface in a fast-evolving, AI-driven landscape.

About the Role:

As a Technical Account Manager, you will be the dedicated technical advisor and security partner for our enterprise customers. Our platform serves as the central nervous system for modern AppSec and ProdSec. In this role, you will bridge the gap between SecOps/CISO organizations and Product/Engineering teams.

You will guide customers through technical deployment, help them operationalize vulnerability remediation workflows, map risk governance frameworks, and ensure they achieve measurable risk reduction and rapid time-to-value across their software development lifecycle (SDLC).

Key Responsibilities:

- Trusted ASPM Advisory

- Act as the primary technical point of contact for clients enterprise security architects, AppSec leads, DevSecOps engineers, and CISOs.
- Advise customers on establishing AppSec maturity programs, prioritizing remediation backlogs (reachability analysis, EPSS/CVSS scores,



business criticality), and enforcing automated security guardrails.
- Partner with customer engineering and security champions to design custom risk scoring, triage policies, deduplication logic, and SLA-driven remediation rules.

2. Deployment, CI/CD Integrations & Data Ingestion
- Guide end-to-end integration of VTrimax (ASPM) platform across customer environments:
- Code Repositories & SCM: GitHub, GitLab, Bitbucket.
- CI/CD Pipelines: GitHub Actions, GitLab CI, Jenkins etc.
- Security Scanners & Formats: SAST, DAST, SCA, Container Security, Cloud Security (IaC/CSPM), and standard formats like SARIF, CycloneDX, and SPDX.
- Issue Trackers platforms

3. Escalations, Root-Cause Analysis & Technical Advocacy
- Manage high-priority technical escalations (ingestion failures, scanner API timeouts, parsing errors, sync mismatches) alongside engineering and product teams.
- Translate complex edge cases and false-positive/deduplication issues into structured technical specifications for the internal engineering and product roadmaps.
- Conduct architecture reviews, release briefings, and hands-on runbook sessions for new platform features and threat detection capabilities.

4. Adoption, Business Reviews & Growth
- Monitor key customer telemetry: scanner coverage,



triage completion rates, mean-time-to-remediate (MTTR), and pipeline gate compliance.
- Lead technical discussions during Quarterly/Executive Business Reviews (QBRs/EBRs), demonstrating tangible AppSec ROI and vulnerability posture improvements.
- Identify expansion opportunities (new business units, additional repository onboarding, enterprise-wide rollout) in collaboration with Customer Success and Sales.

Qualifications & Experience Required:

- Experience: 2–6+ years in a customer-facing technical role (TAM, DevSecOps/Security Solutions, Customer Success Engineer) at a cybersecurity, AppSec, DevOps, or enterprise developer-tooling company.
- AppSec & DevSecOps Domain Knowledge: Solid understanding of the SDLC and application security testing categories: SAST, DAST, SCA, Secrets Detection, Container Scanning, and IaC.
- Deep familiarity with vulnerability classification and standards: CWE, CVE, CVSS, EPSS, OWASP Top 10, and SBOM standards (CycloneDX, SPDX).
- Hands-on experience with SARIF schemas and vulnerability deduplication/correlation concepts.
- Working knowledge of cloud platforms (AWS, GCP, Azure) and enterprise identity protocols (SAML, OIDC, SSO).

What We Offer:

- Competitive base salary + performance bonus + equity options in a fast-growing cybersecurity startup company.
- Comprehensive health, vision, and dental insurance.
- Flexible remote work setup and home office stipend.
- Annual budget for technical certifications, AppSec training, and attendance at top security conferences (e.g., DEF CON, Black Hat, RSA).

📌 Technical Account Manager (Pune)
🏢 SOFIOTIC
📍 Pune