Senior Security Engineer - Penetration Testing Team

Atlassian · Bengaluru · Posted 2025-07-01

Tech stack: AWS, Azure, GCP, Linux

Apply on the company site · Get a referral for this role

Atlassian salary & ratings · Atlassian interview process · More live openings

About the role

Overview Do you love penetration testing, application security and finding bugs in cutting-edge technology stacks? We’re looking for a Senior Security Testing Engineer to be part of a rapidly expanding Security Testing team that is dedicated to supporting the secure development of Atlassian products. As Principal, you will be a Technical SME, execute penetration testing, automation, techniques and methodologies to find meaningful vulnerabilities which off-the-shelf tools won’t. Working at Atlassian Atlassians can choose where they work – whether in an office, from home, or a combination of the two. That way, Atlassians have more control over supporting their family, personal goals, and other priorities. We can hire people in any country where we have a legal entity. Interviews and onboarding are conducted virtually, a part of being a distributed-first company. Responsibilities In this role you will be responsible for Penetration Testing and Manual Code Review across Atlassian's vast products and systems. You will lead and support others in technically validating the state of Atlassian’s technical security, working closely with our security teams and engineering groups. Day-to-day this person will be: Highly experienced in offensive security, penetration testing and application security Providing SME knowledge and guidance to engineering teams Skilled with common exploitation frameworks such as Metasploit, Core Impact & Canvas Working knowledge of KALI Linux or other testing distributions and most of the tools within Able to automate pen testing/code review testing workflows and tasks Analysing vulnerability data for trends, gaps Assessing Atlassian’s estate and products for potential pen testing scope items Qualifications On your first day, we'll expect you to have: The ability to complete a penetration test and code review of a modern cloud application Worked in a senior penetration testing/application security role Experience in automating a testing workflow Experience leading security projects or complex penetration tests Strong, practical understanding of security testing methodologies, supporting infrastructure requirements and awareness of legal considerations Strong collaboration and communication skills when working with closely with deeply technical development and infrastructure teams Experience working with security operations teams to develop detection logic Comfortable operating in and reviewing modern cloud technologies from providers such as AWS, Azure and GCP It's great, but not required, if you have: CVE’s to your name Contributions to open source security software or penetration testing tools Delivered industry presentations Certifications: OSCP, OSCE, OSWE, CREST CRT, GPEN

Qualifications

- On your first day, we'll expect you to have: The ability to complete a penetration test and code review of a modern cloud application Worked in a senior penetration testing/application security role
- Experience in automating a testing workflow
- Experience leading security projects or complex penetration tests
- Strong, practical understanding of security testing methodologies, supporting infrastructure requirements and awareness of legal considerations
- Strong collaboration and communication skills when working with closely with deeply technical development and infrastructure teams
- Experience working with security operations teams to develop detection logic
- Comfortable operating in and reviewing modern cloud technologies from providers such as AWS, Azure and GCP It's great, but not required, if
- you have: CVE’s to your name Contributions to open source security software or penetration testing tools Delivered industry presentations Certifications: OSCP, OSCE, OSWE, CREST CRT, GPEN

Responsibilities

- In this role you will be responsible for Penetration Testing and Manual Code Review across Atlassian's vast products and systems.
- You will lead and support others in technically validating the state of Atlassian’s technical security, working closely with our security teams and engineering groups.
- Day-to-day this person will be: Highly experienced in offensive security, penetration testing and application security
- Providing SME knowledge and guidance to engineering teams Skilled with common exploitation frameworks such as Metasploit, Core Impact & Canvas
- Working knowledge of KALI Linux or other testing distributions and most of the tools within Able to automate pen testing/code review testing workflows and tasks Analysing vulnerability data for trends, gaps Assessing Atlassian’s estate and products for potential pen testing scope items

More openings at Atlassian