Security Engineer - VAPT

Muthoot

3 - 6 years

Bengaluru

Posted: 26/07/2025

Job Description

Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices
Conduct end-to-end VAPT across web, mobile, and API layers, using black box and grey box methodologies.
Simulate attack scenarios as part of red teaming exercises and collaborate with blue teams to validate and harden defences.
Review code, architecture, and configurations with development teams to identify security gaps early in the lifecycle.
Document and sign off internal vulnerability assessments and penetration tests (VA/PT).
Participate in and support internal and external Information Security audits, including audit evidence collection, walkthroughs, and responses.
Ensure alignment with industry standards (OWASP, PTES, NIST, etc.) and compliance mandates such as RBI NBFC guidelines.
Contribute to security policies and standard operating procedures (SOPs), as required.
Track and report vulnerabilities, risks, and mitigation status to leadership and stakeholders.

About Company

Muthoot Finance Ltd. is India’s largest Non-Banking Financial Company (NBFC) specializing in gold loans. Headquartered in Kochi, Kerala, the company offers a wide range of financial services including personal loans, insurance, money transfer, forex, and microfinance. Its core business is providing instant loans against gold jewellery, primarily serving the unbanked and underserved population across urban and rural India. With over 6,000 branches and a strong presence in international markets like the UAE, USA, and UK, Muthoot Finance is known for its deep-rooted trust, operational scale, and strong commitment to financial inclusion. The company is publicly listed and regulated by the Reserve Bank of India.

Security Engineer - VAPT

Muthoot

Job Description

About Company

Services you might be interested in

File Your ITR Now