Offensive Security & Threat Hunting Engineer

Overview

Glomopay's Offensive Security & Threat Hunting Engineer finds ways into the company's systems before an attacker does, and catches attackers who get in anyway, splitting time between offensive testing and threat hunting.

What you'll do

• Run regular internal and external penetration tests across networks, cloud environments, APIs, and employee endpoints to uncover weak points and misconfigurations.
• Hunt through endpoint telemetry (EDR), network logs, and identity provider logs for unauthorised access, lateral movement, and anomalies that automated alerts did not catch.
• Simulate realistic attacks, including credential theft, phishing, and AI-assisted attacks, and work with the IT and Infrastructure team to close the gaps found.
• Write scripts and use AI-assisted security tools so that vulnerability discovery and attack surface monitoring run continuously.
• Write up each finding so an engineer can act on it: what was done, what it exposes, and how to fix it, in priority order.
• Support PCI-DSS and regulatory audits with testing results.

What you'll need

• 3+ years of hands-on work in penetration testing, red teaming, or threat hunting.
• Knowledge of Windows and Linux internals, Active Directory and cloud identity attacks, and how Endpoint Detection and Response (EDR) tools work.
• Comfort with Burp Suite, Nmap, BloodHound, and Metasploit.
• Ability to write SIEM and EDR queries.
• Scripting in Python, PowerShell, or Bash.
• Awareness of how attackers use AI, for example for automated recon; ability to test LLM and API security; use of automation to scale testing.
• Hands-on certifications such as OSCP, CRTO, PNPT, or GCTI.

Nice to have

• An active bug bounty profile on HackerOne or Bugcrowd.
• Open-source security tools that you built or contribute to.
• Security testing in payments or fintech, including PCI-DSS penetration test requirements.
• GCP and Kubernetes attack paths.
• Detection engineering: turning hunt findings into alert rules.

Details

• Location: Bengaluru HQ.
• Works alongside the IT and Infrastructure team.