{"id":120017,"url":"https://alion.io/job/moonpay-information-security-engineer","title":"Information Security Engineer","company":{"id":2725,"name":"MoonPay","domain":"moonpay.com","url":"https://alion.io/company/moonpay","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":45000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cloudflare","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Intercom","optional":false},{"name":"JavaScript","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linear","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"Notion","optional":false},{"name":"Okta","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Slack","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"VPN","optional":false},{"name":"ISO 27001","optional":true},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-08-11T15:17:24Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-16T16:29:29Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"Locations Supported\nIndia, Bengaluru\n\nRelocation available: No\nWork pattern:\nThis role will be in the office.\n\nOn-site 5 days per week.\n\nWorking hours: 12:00 to 9:00 PM IST\n\nAbout the Opportunity\nThe Security Operations (SecOps) team at MoonPay is dedicated to ensuring the security and integrity of our systems and data in an increasingly complex digital landscape. Comprising a diverse group of professionals from various regions around the globe, our multicultural team brings together a wealth of expertise and perspectives to tackle security challenges effectively.\nOur mission is to identify and mitigate vulnerabilities and threats while maintaining strict compliance with security policies and relevant regulations. By leveraging advanced security measures and proactive threat detection techniques, we work diligently to safeguard our infrastructure and protect our customers’ information.\nIn collaboration with the IT team and other departments, we foster a culture of security awareness, sharing best practices and ensuring that everyone at MoonPay understands their role in maintaining a secure environment.\nOur key responsibilities include incident response, security monitoring, endpoint security, VPN, vulnerability management, data leak protection and third-party risk management (TPRM), all of which contribute to our overarching goal: to create a secure environment for our employees, clients and partners.\nJoin us in our commitment to security excellence and help us build a safer future in the blockchain and payments industry!\nWhat You Will Do\nWe are looking for an Information Security Engineer, SaaS & Integration Security, to join our Information Security team, focused on securing our internal SaaS ecosystem, third-party integrations, APIs, and automation workflows. In this role, you will own the security review process for new SaaS applications and integrations end to end, build out threat modeling and secure design practices across the integration lifecycle, and contribute to incident response for SaaS and identity-related events. You are a hands-on individual contributor who is comfortable working across technical tooling, process development, and cross-functional collaboration.\nSaaS and integration security\nSet and maintain security standards for SaaS apps, integrations, APIs, plugins, and automation platforms.\n\nAssess new applications and integrations before approval, reviewing architecture, data flows, and trust boundaries.\n\nEvaluate OAuth scopes, tokens, service accounts, webhooks, extensions, and marketplace apps for excessive permissions, cross-tenant exposure, and unauthorized access.\n\nDefine approved security patterns for APIs, non-human identities, and automation workflows.\n\nAssess AI assistants and third-party AI integrations accessing company systems.\n\nDetects and reduces shadow IT and unsanctioned SaaS-to-SaaS connections.\n\nThreat modeling and secure design\nFacilitate risk-based threat modeling for SaaS apps, integrations, APIs, scripts, and internal tools.\n\nIdentify trust boundaries, abuse cases, and sensitive-data exposure; ensure risks have owners, mitigations, and timelines.\n\nProvide secure design alternatives when proposed solutions create unacceptable risk.\n\nMaintain reusable threat models and review checklists for common integration patterns.\n\nScript and automation security\nReview Python, JavaScript, shell, and low-code/no-code automations for secrets handling, injection risks, unsafe data processing, and excessive permissions.\n\nPromote centralized secrets management, short-lived credentials, and least privilege.\n\nBuild automated checks for exposed secrets and insecure configurations.\n\nProvide clear remediation guidance to engineers and automation owners.\n\nPerform targeted testing of integrations, APIs, identity flows, and configurations.\n\nVendor / Third-Party Security\nConduct vendor and third-party security assessments, evaluating risk posture and reviewing security questionnaires.\n\nReview vendor documentation (SOC 2 reports, pen test summaries) as part of the SaaS approval process.\n\nAssess third-party access to company systems and data, including sub-processor risk.\n\nReassess vendor risk over time as scope or posture changes.\n\nPartner with Legal and Privacy on contractual security requirements.\n\nL2 Incident Response (Operational Role)\nMonitor SaaS environments for suspicious activity, unauthorized integrations, and data-leakage risks\n\nActively participate in Security Operations activities as an L2 Incident Responder.\n\nLead incidents through all stages: identification, containment, eradication, recovery, and lessons learned.\n\nServe as the primary point of contact for the SOC regarding SIEM investigations, platform behavior, detection logic, and operational troubleshooting.\n\nSupport continuous improvement by translating incident learnings into better detections, dashboards, and playbooks.\n\nAbout You\n Describe the ideal candidate’s qualifications, skills, experience, and behaviours that show strong culture alignment.\nYou’re an Information Security Engineer who can both build and operate at scale. You have strong expertise in DLP and are equally comfortable with leading incident response.\nYou will be working primarily on the following stack: Apple systems, Google Workspace, Slack, Mimecast Code42, Okta, Crowdstrike, Cloudflare WARP, Tenable Nessus and Jamf Pro.\nMust-have experience and skills\nExperiences\n3+ years in SaaS security, application security, cloud security, or a related defensive security role\n\nExperience conducting technical security reviews and risk-based threat modeling\n\nTrack record of assessing third-party integrations, APIs, and vendor risk before adoption\n\nExperience validating security findings and driving remediation with engineering/business teams\n\nCybersecurity Principles\nStrong grasp of least privilege, defense in depth, and trust boundary analysis\n\nSolid understanding of identity and access concepts: OAuth, SAML, OIDC, SSO, MFA\n\nFamiliarity with common integration risks: excessive permissions, cross-tenant exposure, insecure data flows, injection, credential exposure, supply-chain compromise\n\nWorking knowledge of frameworks such as OWASP, MITRE ATT&CK, NIST, or CIS Controls\n\nTechnical Proficiency\nAbility to read and review scripts in Python, JavaScript, or shell for security weaknesses\n\nUnderstanding of secrets management, short-lived credentials, and secure API design\n\nHands-on experience securing identity and productivity platforms such as Okta, Google Workspace, and Google Cloud Platform\n\nExperience assessing security and access controls in collaboration/SaaS tools such as Linear, Slack, Notion, Intercom, and Atlassian (Jira/Confluence)\n\nComfort building or using automated checks/tooling to detect exposed secrets, misconfigurations, or permission risks across a SaaS-first stack\n\nAnalytical Skills\nExcellent analytical and problem-solving abilities.\n\nCrisis Management\nAbility to work effectively under pressure.\n\nCapable of handling multiple incidents simultaneously.\n\nCommunication\nStrong communication and interpersonal skills to collaborate with various teams.\n\nNice-to-have experience\nEducation\nBachelor's degree in Computer Science, Information Security, or a related field. Equivalent work experience will be considered.\n\nSecurity Frameworks\nExperience with frameworks such as ISO 27001, SOC 2, and PCI-DSS.\n\nResponsible for defining and implementing key security controls.\n\nIncident Response\nPractical incident response experience including triage, investigation, containment, and communications.\n\nVulnerability Management\nIdentifying, prioritizing, and automating remediation of security vulnerabilities.\n\nVendor / Third-Party Security\nExperience conducting vendor and third-party security assessments, including evaluating risk posture, reviewing security questionnaires, and ensuring third parties meet organizational security standards.\n\nBonus Points\n Optional extras that would help a candidate stand out (keep this short).\nCertifications\nCompTIA Security+, CySA+, CCSP or equivalent certifications are a plus.\n\nOSCP, GWAPT are a plus.\n\nTechnical Proficiency\nProven experience with tools such as:\nGoogle Workspace / Cloud Platform\n\nOkta\n\nSlack\n\nIntercom\n\nNotion\n\nLinear\n\nCrowdstrike","description_format":"text","description_chars":8266,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":true,"industries":["Cryptocurrencies","Crypto Payments","Crypto Wallets"],"lifecycle":[{"event":"open","at":"2026-08-11T15:17:24Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.655,"p_room":0.44,"age_days":65,"expected_fill_days":63,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/moonpay-information-security-engineer","json_url":"https://alion.io/job/moonpay-information-security-engineer.json","meta":{"generated_at":"2026-10-16T17:36:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2236,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2725},"rest":"https://alion.io/mcp/rest/get_company?id=2725"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmoonpay-information-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmoonpay-information-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmoonpay-information-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/moonpay-information-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmoonpay-information-security-engineer"}]}