AppSec Jobs

EXL Security Team

Open security roles at EXL, and what we know about the team behind them.

management consulting · 60000 employees · 3 open roles. Updated October 14, 2026.

Security at EXL

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

“EXL's stated AppSec mission includes a general call to 'For more information, please reach out to:'. Their approach to developer enablement is characterized by an 'end-to-end approach'. The company's risk philosophy involves 'risk analysis and threat modelling'. Stated pain points or goals include 'remediation and reporting' and the use of 'proprietary tools'. Public materials primarily describe EXL's external cybersecurity services and capabilities, lacking an explicit, current internal AppSec mission statement or developer-engagement language. Therefore, much of this information is not publicly available”

The team

No public, verbatim statement describing EXL's internal AppSec organizational model or reporting line was found. Key public-facing leaders include Rahul Bhardwaj, listed as 'Head of Information Security, Americas', Jagmeet Singh, and Rohit Kumar Gupta. The team size estimate and active AppSec job postings are not publicly available. Common skill/tool patterns indicate the use of 'proprietary tools' for cyber risk assessment. Public leadership/contact names exist for EXL cybersecurity services, but no public org chart or published internal AppSec team size or reporting structure was found

What they're working on

  • Direct evidence of pre-commit, IDE, or CI/CD security actions ('Shift Left' in Practice) at EXL was not found.
  • For Vulnerability Management, intake involves 'remediation and reporting', but no verbatim SLAs, MTTR targets, or ticketing ownership statements were found.
  • Secure SDLC Artifacts include 'risk analysis and threat modelling' and an 'end-to-end approach'.
  • Public EXL pages do not describe new, internal AppSec programs, tool rollouts, or policy changes within the last six months.
  • EXL markets external application security services, but public materials do not disclose internal AppSec operational workflows.