Senior Legal Counsel

BreachLock is a global leader in Penetration Testing as a Service (PTaaS), Attack Surface Management and Red Teaming. Founded in 2019 and headquartered in New York, we combine AI, automation and certified human pentesters to help enterprises find and fix exposures before attackers do. Our team works across North America, Europe and Asia, serving customers in technology, banking, financial services, insurance and manufacturing.

We are looking for a Senior Legal Counsel to be BreachLock’s in-house legal advisor across our global business. Based in Pune, you will advise leadership and teams in the US, Europe and Asia on commercial, corporate, data protection, employment and regulatory matters. You will handle most matters yourself and manage outside counsel where specialist or local advice is needed.

•          Draft, review and negotiate customer, partner, reseller and vendor agreements, including MSAs, SaaS subscription terms, SOWs, NDAs and DPAs.

•          Build and maintain contract templates, playbooks and approval workflows so sales and procurement can move quickly.

•          Advise on liability, indemnity, security commitments and service levels typical of cybersecurity engagements, including penetration testing authorizations and rules of engagement.

•          Support corporate secretarial and governance work across group entities in India, the US and other jurisdictions.

•          Support financing, investment and strategic transactions alongside external counsel.

•          Maintain entity records, intercompany agreements and board documentation.

•          Advise on privacy and data protection laws, including India’s Digital Personal Data Protection Act, GDPR, UK GDPR and US state privacy laws.

•          Advise on Indian IT Act and CERT-In requirements, export controls and other regulations relevant to a global cybersecurity business.

•          Support customer security and compliance questionnaires, audits and certifications from a legal perspective.

•          Advise on employment matters across jurisdictions, including contracts, policies, restrictive covenants and terminations, working with HR.

•          Protect BreachLock’s trademarks, software and confidential information, and advise on open-source use.

•          Manage pre-litigation disputes, claims and collections, and oversee outside counsel on any litigation or arbitration.

•          Identify legal risks early and give practical, business-focused advice.

•          Train teams on contracting, privacy and compliance basics.

•          LLB or BA LLB (Hons) from a reputed law school (National Law University preferred), enrolled with a State Bar Council.

•          5–10 years of post-qualification experience, with at least 3 years at a leading Indian law firm with a strong cross-border practice, or at an international law firm.

•          Strong experience in commercial contracts and technology transactions; SaaS, IT services or cybersecurity exposure is a strong plus.

•          Working knowledge of data protection laws in India, the EU and the US.

•          Experience advising clients or businesses across multiple jurisdictions and coordinating with foreign counsel.

•          Excellent drafting and negotiation skills in English, and the ability to explain legal risk clearly to non-lawyers.

•          Comfort working across time zones with US and European colleagues.

•          An LLM, foreign qualification (for example, New York Bar or England and Wales) or CIPP/E or CIPP/US certification is a plus.