VuNet is a pioneer in Business Journey Observability, leveraging Big Data and Machine Learning to transform digital experiences across the financial services. Our deep-tech platform provides end-to-end visibility into customer journeys — empowering proactive issue resolution, operational resilience, and superior user satisfaction.
If you’ve ever used instant payment systems like UPI, chances are you’ve already experienced the power of our platform — we monitor over 28 billion digital transactions monthly (that’s equal to watching 3 years of tik-tok videos), touching 300 million users with leading banks and financial institutions.
VuNet is Series B funded, part of NASSCOM DeepTech Club, awarded NASSCOM’s AI Gamechanger, recognized in Forbes DGEMS 200 and by several global analysts including Gartner, Omdia.
We’re building a new category of observability purpose-built for complex digital journeys — across payments, lending, core banking and more — already powering some of the largest banks in India and MEA.
We are looking for a motivated Information Security Engineer to help strengthen and continuously improve the security posture of VuNet’s observability platform across cloud-hosted and on-premise deployments.
The ideal candidate will work closely with Product Engineering, DevOps, Customer Success, and Compliance teams to identify security risks, execute security assessments, support audits, and drive security best practices across the software development lifecycle.
Security Assessments & Vulnerability Management
- Execute security assessments including Vulnerability Assessment & Penetration Testing (VAPT), web application security testing, API security testing, network security reviews, CIS benchmark validation, and infrastructure vulnerability scans.
- Monitor, analyze, and track vulnerabilities identified through internal assessments, customer findings, security advisories, and third-party security tools.
- Assist in CVE analysis, CVSS scoring, vulnerability triage, risk prioritization, and remediation validation activities.
- Support remediation efforts by working closely with Engineering and DevOps teams to address security findings in a timely manner.
- Participate in security monitoring activities and help identify suspicious activities, security misconfigurations, and emerging threats.
DevSecOps & SDLC Support
- Assist in integrating security controls and automated security checks within the Software Development Lifecycle (SDLC) and CI/CD pipelines.
- Assist in implementing security best practices across cloud environments, containerized workloads, operating systems, databases, and deployment architectures.
- Stay updated on emerging security threats, vulnerabilities, and industry best practices to continuously improve VuNet's security posture.
Compliance & Documentation
- Support compliance initiatives and audits related to ISO 27001, SOC 2, GDPR, and customer-specific security requirements.
- Maintain security documentation, audit evidence, risk registers, security policies, and remediation trackers.
- Assist in responding to customer security questionnaires, compliance reviews, and technical security assessments.
Collaboration & Stakeholder Support
- Support the security posture of VuNet's Business Observability platform across cloud-hosted and on-premise customer deployments by identifying, assessing, and mitigating security risks.
- Collaborate with Product, Engineering, DevOps, and Customer Success teams to ensure security requirements are incorporated throughout the product lifecycle.
1–3 years of experience in Information Security, Application Security, or Cybersecurity.
Web, API & Network Security
- Understanding of Web Application, API, and Network Security fundamentals, including OWASP Top 10, OWASP API Top 10, authentication, authorization, and common attack vectors.
- Understanding of Linux systems, networking concepts, and security fundamentals.
Vulnerability Management
- Hands-on experience with security assessment and vulnerability scanning tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, OpenVAS, Qualys, or similar.
- Understanding of CVE analysis, CVSS scoring, vulnerability triage, remediation tracking, and risk prioritization.
Cloud & Infrastructure Security
- Familiarity with cloud platforms such as AWS, Azure, or GCP and their native security controls.
- Basic knowledge of CI/CD pipelines, DevOps workflows, and integrating security checks within SDLC.
Compliance & Documentation
- Familiarity with ISO 27001, SOC 2, GDPR, or similar compliance frameworks.
- Ability to maintain security documentation, audit evidence, and remediation trackers.
Scripting & Automation
- Basic scripting skills in Python, Bash, or PowerShell for security automation and reporting.
Certifications
- Security+, CEH, or equivalent — entry-level certifications that demonstrate foundational security knowledge and commitment to the field.
Container & Kubernetes Security
- Exposure to containerized environments, Kubernetes fundamentals, and container security concepts.
- Familiarity with tools such as Trivy, Kubescape, or equivalent for container and image scanning.
Application Security Tools
- Knowledge of SAST / code scanning tools such as Snyk, SonarQube, Semgrep, or equivalent.
Domain Familiarity
- Experience working with SaaS, cloud-native, or platform engineering products.
- Familiarity with observability, monitoring, or AIOps platforms
- Vulnerabilities identified during assessments are accurately triaged, documented, and handed off to engineering teams with clear remediation notes within defined timelines.
- Security checks are successfully integrated into at least one CI/CD pipeline with support from senior engineers.
- Compliance documentation, audit evidence, and remediation trackers are maintained accurately and kept current at all times.
- Customer security questionnaires and compliance reviews are responded to independently with minimal escalations.
- Security awareness visibly improves within the immediate team through consistent application of secure development practices.
At VuNet, we’re building a world-class observability platform, proudly Made in India — and we're just getting started.
We’re a team of passionate problem-solvers who love tackling complex challenges. We learn fast, adapt quickly, and stay curious — especially when it comes to exploring and staying ahead of the curve with emerging technologies like Gen AI.
More than just a tech company, VuNet is a place where collaboration, learning, and innovation are part of everyday life. We believe in working together, taking ownership, and growing as a team.
If you’re looking to work on cutting-edge technology, make a real impact, and grow with a supportive team — you’ll feel right at home at VuNet.
- Health insurance coverage for you, your parents, and dependents.
- Mental wellness and 1:1 counselling support.
- A learning culture that promotes growth, innovation, and ownership.
- Transparent, Inclusive, and high-trust workplace culture.
- New Gen AI and integrated Technology workspace.
- Supportive career development programs to expand your skills and enhance expertise with various training programs.
