{"id":2300562,"url":"https://alion.io/job/cashfree-payments-soc-engineer-3","title":"SOC Engineer 3","company":{"id":917,"name":"Cashfree Payments","domain":"cashfree.com","url":"https://alion.io/company/cashfree","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Kula","truth_index":null},"role":"Hardware","role_family":"Hardware","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":16500,"max_usd":38000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":775},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-10-10T21:06:27Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T10:51:08Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"SOC Engineer - 3\nDetection Engineering, Incident Leadership & Operational Excellence\nLocation: Bangalore (Work From Office)\nReports to: CISO\nCashfree Payments operates mission-critical payment and API infrastructure under RBI and\nPCI-DSS oversight. Our environment processes high-volume financial transactions and\ndemands high-fidelity detection, rapid response, and operational resilience.\nWe are building an automation-driven SOC designed to scale beyond traditional monitoring\nmodels.\nRole Summary\nThe SOC Engineer - 3 is a senior, hands-on technical expert pivotal in accelerating the defensive posture and operational maturity of the Cashfree Payments SOC. This role moves beyond traditional monitoring, focusing instead on Detection Engineering, Incident Response\nLeadership, and operational scaling within our high-volume, regulated Fintech environment.\nWe are looking for a system-thinker and builder who can autonomously architect scalable, automation-driven security solutions.\nKey Responsibilities\nDetection and Threat Engineering\nArchitect, develop, implement, and continually tune detection rules and correlation logic across SIEM and EDR platforms.\nProactively identify and remediate detection gaps, mapping coverage to the MITRE\nATT&CK framework and leveraging threat intelligence, with a special focus on cloud (AWS), containerized (Kubernetes), and payment systems.\nImplement advanced contextual alerting and enrichment strategies to drastically reduce false positive rates and combat alert fatigue.\nConduct proactive, hypothesis-driven hunting exercises across diverse telemetry sources (cloud, network, endpoint) to uncover covert threats.\nIncident Response Leadership & Handling\nFunction as the primary technical lead for high-severity and complex security incidents, driving effective containment, eradication, and recovery strategies.\nExecute in-depth log analysis, digital forensics triage, and timeline reconstruction to determine the root cause and scope of compromise.\nTranslate findings and lessons learned from incidents into immediate, measurable improvements in detection and prevention mechanisms.\nEnsure meticulous documentation of all incidents, including technical steps, post-incident reviews, and executive summaries.\nSOC Operational Maturity & Automation\nDesign, develop, and maintain automation playbooks using SOAR platforms to streamline repetitive tasks, triage, and incident response workflows.\nUtilize strong scripting skills (e.g. Python) to engineer custom tools and automation solutions, reducing manual effort and increasing response consistency.\nEstablish and refine Standard Operating Procedures (SOPs) and investigation playbooks, ensuring they are current, effective, and adopted across the team.\nPerformance & Team Enablement\nTake full ownership of critical SOC metrics, including Mean Time to Detect (MTTD),\nMean Time to Respond (MTTR), and False Positive Rate. Drive measurable improvement quarter over quarter.\nMentor and coach SOC team, elevating their investigative, analytical, and tooling skills.\nPlan and execute periodic simulation exercises (e.g., tabletop exercises, purple team engagements) to test and validate SOC readiness and playbooks.\nRequired Qualifications and Expertise\nTechnical Foundation\nB.Tech. in Computer Science, Electrical, or Computer Engineering or equivalent practical experience.\n7+ years of hands-on experience in a dedicated Security Operations Center (SOC), Incident Response, or Detection Engineering role.\nExpert-level proficiency in SIEM platforms (e.g., Splunk, Elastic, Sentinel) including advanced rule creation, custom parsing, and dashboard development.\nDemonstrated strong scripting skills in Python for security automation and data manipulation.\nExcellent understanding of TCP/IP, common network protocols, and the function of security appliances (Firewalls, IDS/IPS, Proxies).\nSoft Skills & Leadership\nProven ability to operate independently, set priorities, and drive complex projects from concept to completion.\nExceptional analytical and problem-solving skills for complex, multi-stage security incidents.\nStrong verbal and written communication skills for both technical and executive audiences.\nExperience working in a PCI-DSS or RBI-regulated environment is highly desirable.\nWhat Excellence Looks Like\nSignificant reduction in alert fatigue\nImproved detection coverage and signal accuracy\nFaster, more consistent incident response\nClear improvements in SOC KPIs over time\nAudit evidence readily available without reactive effort\nSOC processes become automation-driven and scalable","description_format":"text","description_chars":4586,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Financial Software & Embedded Finance","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-11T21:06:27Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.901,"p_room":1,"age_days":11,"expected_fill_days":48,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/cashfree-payments-soc-engineer-3","json_url":"https://alion.io/job/cashfree-payments-soc-engineer-3.json","meta":{"generated_at":"2026-10-22T11:37:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9642,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":917},"rest":"https://alion.io/mcp/rest/get_company?id=917"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcashfree-payments-soc-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcashfree-payments-soc-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcashfree-payments-soc-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cashfree-payments-soc-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcashfree-payments-soc-engineer-3"}]}