Offensive Security & Threat Hunting Engineer

Glomo builds cross-border payment infrastructure. Our network connects local payment rails across countries, so customers move money across borders in seconds. We are a licensed Payment Service Provider at GIFT IFSC, regulated by IFSCA, and the first of our kind in India. We are also a Visa Principal Member, the first non-bank acquirer in India to join the network, so we acquire and process Visa card payments directly. The team behind Glomo has more than 100 years of combined experience in building large payment products.

Glomo moves real money across borders and handles card data and customer KYC records. That makes us a target. This role exists to find the ways into our systems before an attacker does, and to catch the ones who get in anyway. You split your time between offence and hunting. On offence, you test our cloud, APIs, networks, and employee endpoints the way a real attacker would. On the hunting side, you work through endpoint, network, and identity logs for what our alerts missed. You work alongside the IT and Infrastructure team and see each finding through to the fix. Your testing also backs our PCI-DSS and regulatory audits.

• An active bug bounty profile on HackerOne or Bugcrowd

• Open-source security tools that you built or contribute to

• Security testing in payments or fintech, including PCI-DSS penetration test requirements

• GCP and Kubernetes attack paths

• Detection engineering: turning hunt findings into alert rules

You own how we test, harden, and monitor our entire technical footprint.

Your findings go straight to the engineers who fix them. No endless bureaucracy.