Information Security Engineer, DLP & Insider Risk

About this job

MoonPay is a high-velocity company building the operating system for value movement, handling crypto, stablecoins, tokenized assets, and more for over 30 million customers. The Security Operations team ensures the security and integrity of systems and data while complying with global regulations. As an Information Security Engineer for DLP and Insider Risk at MoonPay in Bengaluru, you will be part of a multicultural SecOps team. In this role, a normal day involves owning the Data Loss Prevention program end-to-end, building out Insider Risk and User and Entity Behavior Analytics (UEBA) capabilities, participating in L2 incident response, and collaborating across departments. Working hours are from 6:30 PM to 3:30 AM IST in an office-based setup.

Responsibilities

• Deploy, configure, optimize, and maintain tools like Mimecast Code42, Slack, and Google Workspace to prevent data exfiltration.
• Design and roll out technical controls to prevent data leakage from endpoints across email, browsers, and messaging applications.
• Develop and manage a pre-hire insider risk process in collaboration with Talent Acquisition.
• Build and maintain a defensive program to address deepfake threats, including detection capabilities and awareness.
• Actively participate in Security Operations as an L2 Incident Responder, leading incidents through all lifecycle stages.
• Serve as the primary point of contact for the SOC regarding SIEM investigations, detection logic, and platform behavior.
• Translate incident learnings into improved detections, dashboards, and playbooks.

Requirements

• 3 to 5 years of experience in information security with a focus on data protection, DLP, or insider threat.
• Experience building and operationalizing DLP programs, tuning detection rules, and writing response runbooks.
• Working knowledge of GRC principles, data classification frameworks, and security frameworks such as NIST, ISO 27001, or SOC 2.
• At least 1 year of Google Workspace experience relevant to the role's responsibilities.
• Proficiency with SIEM platforms such as Google SecOps for security investigations.
• Hands-on experience with Okta for identity and access management in a security context.
• Experience with YARA rules or similar pattern-matching detection methods.

Good to have

• Exposure to SSPM tooling and CIS hardening standards for SaaS and endpoint environments.
• Familiarity with email security gateway solutions for threat prevention and analysis.

Who should apply

This role suits an experienced information security professional who has 3 to 5 years of hands-on background in data protection, DLP, or insider threat. Candidates should be comfortable working in an office setup during evening and night hours from 6:30 PM to 3:30 AM IST in Bengaluru. The ideal applicant enjoys working across technical tooling, process development, and cross-functional collaboration, and aligns with a high-velocity, high-accountability company culture. Freshers cannot apply as 3 to 5 years of specific experience is required.

Frequently asked questions