Why Join 7-Eleven Global Solution Center?

When you join us, you'll embrace ownership as teams within specific product areas take responsibility for end-

to-end solution delivery, supporting local teams and integrating new digital assets. Challenge yourself by contributing to products deployed across our extensive network of convenience stores, processing over a billion transactions annually. Build solutions for scale, addressing the diverse needs of our 84,000+ stores in 19

countries.

Experience growth through cross-functional learning, encouraged and applauded at 7-Eleven GSC.

With our size, stability, and resources, you can navigate a rewarding career. Embody leadership and service as

7-Eleven GSC remains dedicated to meeting the needs of customers and communities.

Why We Exist, Our Purpose and Our Transformation?

7-Eleven is dedicated to being a customer-centric, digitally empowered organization that seamlessly integrates our physical stores with digital offerings. Our goal is to redefine convenience by consistently providing top-

notch customer experiences and solutions in a rapidly evolving consumer landscape. Anticipating customer preferences, we create and implement platforms that empower customers to shop, pay, and access products and services according to their preferences. To achieve success, we are driving a cultural shift anchored in leadership principles, supported by the realignment of organizational resources and processes.

At 7-Eleven we are guided by our Leadership Principles. Each principle has a defined set of behaviours which help guide the 7-Eleven GSC team to Serve Customers and Support Stores.

1.

Be Customer

Obsessed

- Be Courageous with Your Point of View
- Challenge the Status Quo
- Act Like an Entrepreneur
- Have an “It Can Be Done” Attitude
- Do the Right Thing
- Be Accountable

About This Opportunity

Job Title: Security Engineer/Analyst

Location: Bangalore

At 7-Eleven, we are disruptors, makers, and innovators. Our mission is to create digital products that positively impact hundreds of thousands of people every day. We are looking for an experienced Security

Engineer/Analyst to join our cybersecurity team. The ideal candidate will have deep expertise in ethical hacking, vulnerability assessment, and security analysis to identify and remediate security weaknesses in networks, applications, and systems.

Private Label | Internal Circulation only

Responsibilities

- Execute Breach and Attack Simulation (BAS) and adversary emulation activities aligned with the MITRE

ATT&CK; framework.

- Conduct attack simulations covering ransomware, malware, credential attacks, lateral movement, and other adversarial techniques.
- Design,



customize, and execute SafeBreach attack scenarios to validate the effectiveness of security controls.
- Perform web application, API, mobile, and infrastructure penetration testing to identify, validate, and assess security vulnerabilities.
- Schedule recurring attack simulations and track improvements in the organization's security posture.
- Plan and execute Red Team exercises to simulate real-world attack scenarios and threat actor behaviors.
- Conduct Purple Team exercises in collaboration with Blue Teams and SOC analysts to validate detection, investigation, and response capabilities.
- Assess the effectiveness of security controls, including WAF, EDR/XDR, SIEM, IDS/IPS, IAM, firewalls,

and network security solutions.

- Collaborate with SOC and SIEM teams to validate log ingestion, detection rules, generation, and security monitoring capabilities.
- Identify gaps in security prevention, detection, and response mechanisms and recommend appropriate improvements.
- Evaluate security solutions against emerging threats, vulnerabilities, and adversarial attack techniques.
- Prepare detailed technical assessment reports and executive-level summaries, including risk ratings,

supporting evidence, and remediation recommendations.

- Coordinate with development, infrastructure, and security teams to facilitate vulnerability remediation and security control improvements.
- Perform retesting and follow-up validation to confirm remediation effectiveness and verify improvements in security controls.
- Stay up to date with emerging threats, Common Vulnerabilities and Exposures (CVEs), attack techniques, and cybersecurity trends.

Technical Skills Required

- Up to 3 years of experience in penetration testing, security control validation, ethical hacking, or offensive security.
- Strong understanding of security testing methodologies, tools, frameworks, and attack simulation techniques.
- Knowledge of infrastructure security, including networking, Active Directory, Windows/Linux systems,

and cloud environments.

- Familiarity with BAS platforms such as SafeBreach, AttackIQ, or equivalent tools.
- Understanding of security frameworks, including MITRE ATT&CK; and the Cyber Kill Chain.
- Hands-on experience with manual and automated security testing techniques.




- Knowledge of web application, mobile application, and API security testing, including OWASP Top 10,

business logic vulnerabilities, and authentication and authorization flaws.

- Proficiency in scripting languages such as Python, PowerShell, or Bash for security testing and automation.
- Basic understanding of cloud security across AWS, Microsoft Azure, or Google Cloud Platform (GCP) is an added advantage.
- Experience in bug bounty programs or vulnerability research is desirable.
- Familiarity with secure coding practices, application security principles, and common vulnerability remediation techniques.
- Ability to research emerging cyber threats, ransomware campaigns, and adversary Tactics, Techniques,

and Procedures (TTPs).

- Ability to map threat intelligence to MITRE ATT&CK; techniques and develop relevant attack simulation scenarios.
- Experience conducting controlled attack simulations to assess organizational readiness and validate

Private Label | Internal Circulation only security controls against real-world attack techniques.

Education &

Experience

- Bachelor's/master’s degree in computer science, Information Security, or related field (or equivalent practical experience).
- Relevant security certifications like OSCP, OSWE, CPENT, CRTP, CEH, eJPT, or GPEN are highly preferred

Privileges & Perquisites:

7-Eleven Global Solution Center offers a comprehensive benefits plan tailored to meet the needs and improve the overall experience of our employees, aiding in the management of both their professional and personal aspects.

Work-Life Balance: Encouraging employees to unwind, recharge, and find balance, we offer flexible and hybrid work schedules along with diverse leave options. Supplementary allowances and compensatory days off are provided for specific work demands.

Well-Being & Family Protection: Comprehensive medical coverage for spouses, children, and parents/in-

laws, with voluntary top-up plans, OPD coverage, day care services, and access to health coaches.

Additionally, an Employee Assistance Program with free, unbiased and confidential expert consultations for personal and skilled issues.

Wheels and Meals: Free transportation and cafeteria facilities with diverse menu options including breakfast, lunch, snacks, and beverages, customizable and health-conscious choices.

Certification & Training Program: Sponsored training for specialized certifications. Investment in employee development through labs and learning platforms.

Hassel free Relocation: Support and reimbursement for newly hired employees relocating to Bangalore,

India.

Private Label | Internal Circulation only

📌 Information Security Analyst (Bengaluru)
🏢 Eleven
📍 Bengaluru