Vegapay - Security Engineer - VAPT
24 hours ago
Our Story : Vegapay Technology is a financial technology company. It partners with banks and financial institutions to digitize its financial infrastructure.It provides users with a credit suite featuring a wide breadth of modules and no-code configuration to design, deploy, and direct their credit programs.It provides access to build financial asset products including Card Management System, LOS, LMS, Co-lending and more.Founded in 2022 by Gaurav Mittal, Himanshu Agrawal and Puneet Sharma, the startup is a B2B digital lending and Card Management Platform.Vegapays vision is to liberate financial institutions and fintech enterprises from every technical barrier which hinders offering a lending programme.Meet the Team : Gaurav Mittal Gaurav is the Co-Founder and the CEO of the company. He is having more than 20 yrs of experience and has worked with organisations like Zeta, Matchmove, MasterCard, Amex and ICICI Bank.Himanshu Agrawal Himanshu is the Co-Founder and the Head of Technology. He is from IIT Kanpur and has more than 14 yrs of experience working with organisations like Amazon and DE Shaw.Puneet Sharma Puneet is the Co-Founder and the Head of Product. He is from IIT Roorkee and has more than 10 years of experience working with organisations like BharatPe, Avail Finance.The Hats You Will Wear :- Plan and execute Vulnerability Assessment & Penetration Testing (VAPT) for Web, Mobile, and API applications; reproduce issues, write PoCs, and validate fixes.- Perform Network VAPT using standard methodologies; document risks and hardening actions.- Embed security testing in CI/CD (SAST/DAST, dependency/SBOM scans) and track remediation SLAs.- Analyze and mitigate OWASP Top 10 and business-logic flaws; coach developers on secure patterns.- Operate and tune security tooling: Burp Suite, AppScan, OWASP ZAP, BeEF, Metasploit, Qualys, Nessus, Snyk, Wazuh, SonarQube, Trivy.- Assess and improve authentication/authorization (OIDC, OAuth, SAML); review token flows and session controls.- Support audits & compliance (PCI DSS, ISO 27001, SOC 2, CICRA, NIST): evidence collection, control mapping, auditor interactions.- Strengthen cloud security across AWS/GCP/Azure (S3, load balancers, Kubernetes, Docker); identify misconfigurations and enforce least privilege.- Read and reason about Java code paths to pinpoint root causes and guide fixes.- Produce clear reports (risk, impact, exploitability, remediation) for technical and non-technical audiences.The Perfect Fit :- 3+ years of relevant experience in Information Security.- Proven hands-on VAPT for Web/Mobile/API and Network VAPT.- Strong knowledge of OWASP Top 10 (attacks and defenses).- Proficiency with commercial/open-source tools: Burp Suite, AppScan, ZAP, BeEF, Metasploit, Qualys, Nessus, Snyk, Wazuh, SonarQube, Trivy.- Demonstrated ability to uncover complex business-logic vulnerabilities.- Working understanding of OIDC, OAuth, SAML.- Ability to read/write Java and understand basic application logic.- Experience with PCI DSS, ISO 27001, SOC 2, CICRA, NIST and auditor engagement.- Working knowledge of cloud security and core components in AWS/GCP/Azure (i.e., S3, Load Balancers, Kubernetes, Docker). (ref:hirist.tech)
-
Vegapay - Technical Project Manager
24 hours ago
Bengaluru, India Vegapay Full timeDescription :Our Story : At Vegapay, we are revolutionizing the financial landscape by enabling banks and financial institutions to digitize their financial infrastructure.Our innovative credit suite, equipped with a wide range of modules and no-code configuration, empowers businesses to design, deploy, and manage their credit programs seamlessly.From card...
-
Vegapay - Principal Engineer - Data Science
23 hours ago
Bengaluru, India Vegapay Full timeOur Story : Vegapay Technology is a financial technology company. It partners with banks and financial institutions to digitize its financial infrastructure. It provides users with a credit suite featuring a wide breadth of modules and no-code configuration to design, deploy, and direct their credit programs. It provides access to build financial asset...
-
Vegapay - Backend Engineer II
23 hours ago
Bengaluru, India Vegapay Full timeOur Story : Vegapay Technology is a financial technology company. It partners with banks and financial institutions to digitize its financial infrastructure. It provides users with a credit suite featuring a wide breadth of modules and no-code configuration to design, deploy, and direct their credit programs. It provides access to build financial asset...
-
Vegapay - Senior DevSecOps Engineer - CI/CD Pipeline
24 hours ago
Bengaluru, India Vegapay Full timeDescription :Our Story : Vegapay Technology is a financial technology company. It partners with banks and financial institutions to digitize its financial infrastructure.It provides users with a credit suite featuring a wide breadth of modules and no-code configuration to design, deploy, and direct their credit programs. It provides access to build financial...
-
Bengaluru, India Vegapay Full timeDescription :Our Story :At Vegapay, we are revolutionizing the financial landscape by enabling banks and financial institutions to digitize their financial infrastructure.Our innovative credit suite, equipped with a wide range of modules and no-code configuration, empowers businesses to design, deploy, and manage their credit programs seamlessly.From card...
-
Vegapay - Backend Engineer III
24 hours ago
Bengaluru, India Vegapay Full timeOur Story :Vegapay Technology is a financial technology company. It partners with banks and financial institutions to digitize its financial infrastructure.It provides users with a credit suite featuring a wide breadth of modules and no-code configuration to design, deploy, and direct their credit programs.It provides access to build financial asset products...
-
Vegapay - Engineering Manager - Java/Python
2 weeks ago
Bengaluru, India Vegapay Full timeAs an Engineering Manager, you'll take charge of the technical direction of exciting projects, leading a talented team of engineers while collaborating with other departments to create top-tier software solutions. This role combines hands-on technical expertise, leadership, and strategic thinking, offering the perfect opportunity for someone ready to...
-
SOC & VAPT Security Analyst
1 day ago
Bengaluru, India FinSpot Technology Solutions Private Limited Full timeRole OverviewWe are seeking a skilled SOC & VAPT Security Analyst with strong expertise in analyzing and remediating vulnerabilities identified in VAPT reports across firewalls, servers, and network infrastructure. The candidate will be responsible for performing detailed security assessments, validating SOC alerts, implementing fixes, and ensuring...
-
SOC & VAPT Security Analyst
24 hours ago
Bengaluru, India FinSpot Technology Solutions Private Limited Full timeRole OverviewWe are seeking a skilled SOC & VAPT Security Analyst with strong expertise in analyzing and remediating vulnerabilities identified in VAPT reports across firewalls, servers, and network infrastructure. The candidate will be responsible for performing detailed security assessments, validating SOC alerts, implementing fixes, and ensuring...
-
SOC & VAPT Security Analyst
24 hours ago
Bengaluru, India FinSpot Technology Solutions Private Limited Full timeRole Overview We are seeking a skilled SOC & VAPT Security Analyst with strong expertise in analyzing and remediating vulnerabilities identified in VAPT reports across firewalls, servers, and network infrastructure. The candidate will be responsible for performing detailed security assessments, validating SOC alerts, implementing fixes, and ensuring...
