Offensive Security & Threat Hunting Engineer

ABOUT US

Glomo builds cross-border payment infrastructure. Our network connects local payment rails across countries, so customers move money across borders in seconds. We are a licensed Payment Service Provider at GIFT IFSC, regulated by IFSCA, and the first of our kind in India. We are also a Visa Principal Member, the first non-bank acquirer in India to join the network, so we acquire and process Visa card payments directly. The team behind Glomo has more than 100 years of combined experience in building large payment products.

YOUR IMPACT

Glomo moves real money across borders and handles card data and customer KYC records. That makes us a target. This role exists to find the ways into our systems before an attacker does, and to catch the ones who get in anyway. You split your time between offence and hunting. On offence, you test our cloud, APIs, networks, and employee endpoints the way a real attacker would. On the hunting side, you work through endpoint, network, and identity logs for what our alerts missed. You work alongside the IT and Infrastructure team and see each finding through to the fix. Your testing also backs our PCI-DSS and regulatory audits.

WHAT YOU WILL DO

Penetration testing. Run regular internal and external tests across our networks, cloud environments, APIs, and employee endpoints to uncover weak points and misconfigurations.

Threat hunting. Dig through endpoint telemetry (EDR), network logs, and identity provider logs for unauthorised access, lateral movement, and anomalies that our automated alerts did not catch.

Adversary simulation and purple teaming. Simulate realistic attacks, including credential theft, phishing, and AI-assisted attacks, then work with our IT and Infrastructure team to close the gaps you find.

Automation. Write scripts and use AI-assisted security tools so that vulnerability discovery and attack surface monitoring run continuously.

Reporting. Write up each finding so that an engineer can act on it: what you did, what it exposes, and how to fix it, in priority order. No bloated, copy-pasted scanner reports.

WHAT YOU WILL BRING

Experience. 3+ years of hands-on work in penetration testing, red teaming, or threat hunting.

Endpoint and network depth. You know Windows and Linux internals, Active Directory and cloud identity attacks, and how Endpoint Detection and Response (EDR) tools work.

Tooling and scripting. You are comfortable with Burp Suite, Nmap, BloodHound, and Metasploit, you write SIEM and EDR queries, and you script in Python, PowerShell, or Bash.

AI awareness. You know how attackers use AI, for example for automated recon, you can test LLM and API security, and you use automation to scale your own testing.

Practical credentials. Hands-on certifications such as OSCP, CRTO, PNPT, or GCTI matter more to us than a purely theoretical degree.

GOOD TO HAVE

- An active bug bounty profile on HackerOne or Bugcrowd

- Open-source security tools that you built or contribute to

- Security testing in payments or fintech, including PCI-DSS penetration test requirements

- GCP and Kubernetes attack paths

- Detection engineering: turning hunt findings into alert rules

WHY JOIN US

High autonomy

You own how we test, harden, and monitor our entire technical footprint.

Builder culture

Your findings go straight to the engineers who fix them. No endless bureaucracy.

PERKS AND BENEFITS

- Ground-floor opportunity at a fast-growing company, where your work directly sets our direction

- Accelerated career growth: we invest in your development

- Competitive compensation with equity ownership

- Comprehensive health insurance, flexible time off, and a professional development budget

- A close team that celebrates wins and supports each other