{"id":4164977,"url":"https://alion.io/job/glomo-offensive-security-threat-hunting-engineer","title":"Offensive Security & Threat Hunting Engineer","company":{"id":1038724,"name":"Glomo","domain":"glomo.one","url":"https://alion.io/company/glomo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":1800000,"max":2200000,"currency":"INR","period":"year","gross":null,"usd_annual":23727},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"Bash","optional":false},{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"GCP","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-12T10:31:27Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T13:17:53Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"ABOUT US\nGlomo builds cross-border payment infrastructure. Our network connects local payment rails across countries, so customers move money across borders in seconds. We are a licensed Payment Service Provider at GIFT IFSC, regulated by IFSCA, and the first of our kind in India. We are also a Visa Principal Member, the first non-bank acquirer in India to join the network, so we acquire and process Visa card payments directly. The team behind Glomo has more than 100 years of combined experience in building large payment products.\nYOUR IMPACT\nGlomo moves real money across borders and handles card data and customer KYC records. That makes us a target. This role exists to find the ways into our systems before an attacker does, and to catch the ones who get in anyway. You split your time between offence and hunting. On offence, you test our cloud, APIs, networks, and employee endpoints the way a real attacker would. On the hunting side, you work through endpoint, network, and identity logs for what our alerts missed. You work alongside the IT and Infrastructure team and see each finding through to the fix. Your testing also backs our PCI-DSS and regulatory audits.\nWHAT YOU WILL DO\nPenetration testing. Run regular internal and external tests across our networks, cloud environments, APIs, and employee endpoints to uncover weak points and misconfigurations.\nThreat hunting. Dig through endpoint telemetry (EDR), network logs, and identity provider logs for unauthorised access, lateral movement, and anomalies that our automated alerts did not catch.\nAdversary simulation and purple teaming. Simulate realistic attacks, including credential theft, phishing, and AI-assisted attacks, then work with our IT and Infrastructure team to close the gaps you find.\nAutomation. Write scripts and use AI-assisted security tools so that vulnerability discovery and attack surface monitoring run continuously.\nReporting. Write up each finding so that an engineer can act on it: what you did, what it exposes, and how to fix it, in priority order. No bloated, copy-pasted scanner reports.\nWHAT YOU WILL BRING\nExperience. 3+ years of hands-on work in penetration testing, red teaming, or threat hunting.\nEndpoint and network depth. You know Windows and Linux internals, Active Directory and cloud identity attacks, and how Endpoint Detection and Response (EDR) tools work.\nTooling and scripting. You are comfortable with Burp Suite, Nmap, BloodHound, and Metasploit, you write SIEM and EDR queries, and you script in Python, PowerShell, or Bash.\nAI awareness. You know how attackers use AI, for example for automated recon, you can test LLM and API security, and you use automation to scale your own testing.\nPractical credentials. Hands-on certifications such as OSCP, CRTO, PNPT, or GCTI matter more to us than a purely theoretical degree.\nGOOD TO HAVE\nAn active bug bounty profile on HackerOne or Bugcrowd\n\nOpen-source security tools that you built or contribute to\n\nSecurity testing in payments or fintech, including PCI-DSS penetration test requirements\n\nGCP and Kubernetes attack paths\n\nDetection engineering: turning hunt findings into alert rules\n\nWHY JOIN US\nHigh autonomy\nYou own how we test, harden, and monitor our entire technical footprint.\nBuilder culture\nYour findings go straight to the engineers who fix them. No endless bureaucracy.\nPERKS AND BENEFITS\nGround-floor opportunity at a fast-growing company, where your work directly sets our direction\n\nAccelerated career growth: we invest in your development\n\nCompetitive compensation with equity ownership\n\nComprehensive health insurance, flexible time off, and a professional development budget\n\nA close team that celebrates wins and supports each other","description_format":"text","description_chars":3723,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off","Health insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Threat Intelligence","Incident Response","Money Transfer & Remittances"],"lifecycle":[{"event":"open","at":"2026-11-12T13:17:53Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":85,"reasons":["conf:2","win:early"],"computed_at":"2026-11-12T15:57:48Z"},"pay":{"stated_usd_annual":23727,"is_top_pay":false},"html_url":"https://alion.io/job/glomo-offensive-security-threat-hunting-engineer","json_url":"https://alion.io/job/glomo-offensive-security-threat-hunting-engineer.json","meta":{"generated_at":"2026-11-12T15:57:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33400,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1038724},"rest":"https://alion.io/mcp/rest/get_company?id=1038724"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglomo-offensive-security-threat-hunting-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglomo-offensive-security-threat-hunting-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglomo-offensive-security-threat-hunting-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/glomo-offensive-security-threat-hunting-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglomo-offensive-security-threat-hunting-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4164977}},{"tool":"search_jobs","arguments":{"company":"glomo.one","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4164977},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}