Description
CareerArc Code CA-SB Hybrid: #LI-Hybrid BMC empowers nearly 80% of the Forbes Global 100 to accelerate business value, faster than humanly possible. Our industry-leading portfolio unlocks human and machine potential to drive business growth, innovation, and sustainable success. BMC does this in a simple and optimized way by connecting people, systems, and data that power the world's largest organizations so they can seize a competitive advantage. We are looking for Application Security Engineer to take ownership of security testing for enterprise products deployed on mainframe environments. In this role, you will assess application-layer security risks, identify vulnerabilities in product implementations, and lead secure architecture reviews. The ideal candidate brings deep offensive security skills along with familiarity in testing applications running on or integrated with IBM mainframe systems. Here is how, through this exciting role, YOU will contribute to BMC's and your own success:
Primary Roles and Responsibilities: • Conduct penetration testing and red teaming exercises targeting mainframe environments and the surrounding application ecosystem. • Perform code-assisted and black-box penetration testing against enterprise applications/systems interacting with RACF, DB2, CICS, MQ, and related subsystems. • Identify risks in authentication, authorization, data handling, and communications within mainframe-integrated products. • Create threat models and guide product teams in mitigating high-impact vulnerabilities early in the SDLC. • Drive remediation efforts through hands-on collaboration and secure design guidance. • Author technical reports and deliver executive summaries tailored to various audiences. • Stay current on vulnerabilities, exploits, and testing techniques relevant to legacy enterprise technologies and mainframe ecosystems. • Assess common integration patterns (SOA, REST/JSON, MQ) for security risks. To ensure you're set up for success, you will bring the following skillset & experience:
• 5+ years of experience in penetration testing, with a specialization in systems/applications integrating with mainframe environments. • Deep knowledge of mainframe communication protocols and security mechanisms. • Demonstrated experience conducting red team-style assessments or advanced threat emulation on mainframe systems. • Proficient in tools such as: • Mainframe utilities: REXX, ISPF panels, NetView • Security tools: Nmap, Burp Suite, Wireshark, custom scripts • Strong scripting and automation skills (Python, REXX, Bash, or similar). • Strong communication and leadership skills, with a proven ability to lead technical teams or projects. • Experience producing board-level reports and presenting findings to senior stakeholders. • Exposure to hybrid environments (mainframe to cloud integrations, modernization efforts). • Familiarity with modern enterprise integration methods (REST, SOAP, MQ, FTP) that interface with mainframe services.
Whilst these are nice to have, our team can help you develop in the following skills: • Industry certifications such as OSCP, OSCE, CRTP, GIAC GPEN, GXPN, or CISSP. • Background in regulated industries such as banking, insurance, or government, where mainframes are core infrastructure. • Knowledge of COBOL, PL/I, or other mainframe-centric programming languages. • Experience with compliance standards like PCI-DSS, NIST, or SOX as they apply to mainframes.
Our commitment to you!
BMC's culture is built around its people. We have 6000+ brilliant minds working together across the globe. You won't be known just by your employee number, but for your true authentic self. BMC lets you be YOU!
If after reading the above, You're unsure if you meet the qualifications of this role but are deeply excited about BMC and this team, we still encourage you to apply! We want to attract talents from diverse backgrounds and experience to ensure we face the world together with the best ideas!
BMC is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender, gender expression, gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status as a protected veteran. If you need a reasonable accommodation for any part of the application and hiring process, visit the accommodation request page.
BMC Software maintains a strict policy of not requesting any form of payment in exchange for employment opportunities, upholding a fair and ethical hiring process.At BMC we believe in pay transparency and have set the midpoint of the salary band for this role at 2,841,000 INR. Actual salaries depend on a wide range of factors that are considered in making compensation decisions, including but not limited to skill sets; experience and training, licensure, and certifications; and other business and organizational needs.
The salary listed is just one component of BMC's employee compensation package. Other rewards may include a variable plan and country specific benefits.
We are committed to ensuring that our employees are paid fairly and equitably, and that we are transparent about our compensation practices.
(Returnship@BMC)
Had a break in your career? No worries. This role is eligible for candidates who have taken a break in their career and want to re-enter the workforce. If your expertise matches the above job, visit to https://bmcrecruit.avature.net/returnship know more and how to apply.
Min salary 2,130,750 Mid point salary 2,841,000 Max salary 3,551,250 Min Salary - NEW 2,130,750 Max Salary - NEW 3,551,250recruiter_code
Apply on company website
Find Connections via Linkedin
