Cyber Security Engineer – VAPT

About the role

Pocketly is a fast‑growing fintech platform that provides instant credit to students and young professionals. As a Cyber Security Engineer focused on VAPT, you will protect sensitive financial data, embed security into the product lifecycle, and support compliance with regulatory standards.

Key responsibilities

• Design and implement security frameworks to safeguard financial data and infrastructure.
• Conduct regular IT compliance audits against ISO 27001, PCI‑DSS and SOC 2 standards.
• Identify vulnerabilities through threat hunting, vulnerability assessment and penetration testing, and drive remediation.
• Collaborate with the CISO to define the long‑term security roadmap and incident response procedures.
• Monitor network traffic and security systems to detect and neutralise threats proactively.

Required profile

• 3–4 years of hands‑on experience in a security‑focused role, preferably in fintech or a high‑growth startup.
• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Proven ability to perform quantitative and qualitative risk assessments for senior management.
• Comfortable working in a fast‑paced hybrid environment based in Bangalore.

Required skills

• Threat hunting
• Vulnerability assessment
• Penetration testing (VAPT)
• ISO 27001, PCI‑DSS, SOC 2 compliance knowledge
• Risk assessment and mitigation
• Secure coding practices and cloud security architecture