Xerox Jobs

Job Information

Xerox Offensive Security Engineer (Associate Analyst, IM Security) in Gurugram, India

Offensive Security Engineer (Associate Analyst, IM Security)

General information

City: Gurugram, Bangalore, Cochin

State/Province: Haryana, Karnataka, Kerala

Country: India

Department: Information Management

Date: Wednesday, October 7, 2020

Working time: Full-time

Ref#: 20009743

Job Level: Individual Contributor

Job Type: Experienced

Job Field: Information Management

Description & Requirements

Xerox (NYSE: XRX) makes every day work better. We are a workplace technology company, building and integrating software and hardware for enterprises large and small. As customers seek to manage information across digital and physical platforms, Xerox delivers a seamless, secure and sustainable experience. Whether inventing the copier, the ethernet, the laser printer or more, Xerox has long defined the modern work experience. Learn more at and explore ourcommitment to diversity and inclusion. (

Offensive security engineer is responsible for securing Xerox applications and networks by identifying threats, vulnerabilities using a combination of automated and manual techniques and collaborating with application teams to prioritize and remediate the vulnerabilities.

Timings: 2 PM to 10:30 PM(IST)

Location: Kochi, Gurgaon, Bangalore

Primary Responsibilities:

Perform penetration testing on applications/products to identify security vulnerabilities

Participate in red team exercise on web applications and network

Continuous research on new attack vectors/techniques impacting enterprise applications/networks

Work with cross functional teams to align and prioritize remediation efforts

Provide technical guidance to developers on secure coding practices

Develop secure code practices and provide hands-on training to development teams

Develop scripts, tools, or methodologies to enhance offensive security capabilities

Knowledge and Skills Required :

4-6 years of offensive security responsibilities

Expertise in performing penetration testing on web, mobile, IoT and client server applications

Experience performing automated security testing using static and dynamic scanning tools

Prior experience participating in red team exercises

Experience performing manual code reviews

Prior software development experience is a plus

Strong manual penetration testing and exploit development experience

Knowledge of applicable industry standards, leading security practices and regulatory requirements

Strong exposure to popular application security standards including OWASP TOP 10, SANS TOP 25 etc.

Proficiency with at least one of the following programming languages desired: Java, .Net, C, C++, PHP

Strong interpersonal skills as well as excellent written and verbal communication skills

Uncompromising personal and professional integrity and ethics


Education Requirements:

• Bachelor’s Degree in Cybersecurity, Computer Science, Information Systems, or related field.

Professional Certifications:

• Preferred – A technical certification such as OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN or equivalent is desired.

Xerox is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, sex, marital status, sexual orientation, physical or mental disability, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law. Learn more at and explore ourcommitment to diversity and inclusion! ( People with disabilities who need a reasonable accommodation to apply or compete for employment with Xerox may request such accommodation(s) by sending an e-mail to Be sure to include your name, the job you are interested in, and the accommodation you are seeking.

© 2020 Xerox Corporation. All rights reserved. Xerox® and Xerox and Design® are trademarks of Xerox Corporation in the United States and/or other countries.