{"id":3400520,"url":"https://alion.io/job/vegapay-senior-soc-engineer","title":"Senior SOC Engineer","company":{"id":3795596,"name":"Vegapay","domain":"vegapay.tech","url":"https://alion.io/company/vegapay","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":null},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":46000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":18},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"CI/CD","optional":true}],"status":"live","first_seen_at":"2026-10-28T10:22:43Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-03T08:36:08Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"The Impact You’ll Drive\nVegapay is looking for an experienced security operations professional to build our Security Operations Center from the ground up. As a fintech infrastructure provider processing sensitive financial data on behalf of banks and NBFCs, continuous threat detection, rapid incident response, and defensible monitoring are foundational to the trust our regulated BFSI partners place in us. This is a founding role - you will be the first and only member of the SOC on day one, responsible end-to-end for designing the function, selecting and deploying tooling, running day-to-day operations, and ultimately scaling the team. You will operate independently from day one, while partnering closely with Security, Engineering, GRC, Legal, and leadership to protect Vegapay’s platform, customers, and partners from active threats.\nThe Hats You Will Wear\nSOC Build-Out & Strategy\nDefine and execute the operating roadmap for Vegapay’s Security Operations Center - processes, playbooks, use cases, detection coverage, and metrics\nTake ownership of the SOC technology stack (SIEM, SOAR, EDR, log pipeline, threat intel platform) being stood up in parallel - configure, integrate, tune, and operationalize it end-to-end once onboarded\nEstablish operating cadence, coverage model, and escalation paths; design the hiring plan to scale the function beyond this founding role\nThreat Detection & Monitoring\nBuild and tune detection content across cloud (AWS/GCP), endpoint, identity, network, and application layers\nEstablish monitoring coverage during the build-out - directly during business hours and via tooling and MSSP partnerships off-hours - and transition to an in-house follow-the-sun model as the team grows\nDefine and track SOC KPIs including MTTD, MTTR, false-positive rate, and detection coverage mapped to MITRE ATT&CK\nIncident Response\nOwn end-to-end incident response - triage, containment, eradication, recovery, and post-incident review - for all security events\nAuthor and maintain the incident response plan, runbooks, severity matrix, and tabletop exercise program\nServe as incident commander during security incidents and coordinate response with Engineering, Legal, GRC, and leadership\nThreat Intelligence & Hunting\nOperationalize threat intelligence relevant to fintech, payments, and BFSI threat actors; convert intel into detections and preventative controls\nConduct proactive, hypothesis-driven threat hunts across the environment and document findings into reusable detections\nTrack emerging TTPs targeting the payments ecosystem and brief Security and Engineering leadership on evolving risks\nVulnerability & Attack Surface Management\nOperate vulnerability management across cloud workloads, endpoints, and applications; drive remediation with engineering owners against defined SLAs\nMonitor the external attack surface and triage findings from bug bounty, penetration tests, and red team exercises\nSecurity Tooling & Automation\nBuild automation to reduce manual toil - alert enrichment, response actions, evidence collection, and reporting\nIntegrate SOC tooling with the broader security and engineering stack (ticketing, chatops, CI/CD, cloud control planes, identity providers)\nCross-Functional Collaboration & Reporting\nPartner with GRC to supply evidence of monitoring, detection, and response controls for ISO 27001, SOC 2, PCI-DSS, and RBI audits\nSupport client and auditor queries on security operations, monitoring coverage, and incident response readiness\nPrepare SOC dashboards, incident reports, and leadership/board updates on the threat and detection landscape\nThe Perfect Fit\nBachelor’s degree in Engineering, Technology, Computer Science, or a related field\n6-8 years of hands-on experience in security operations, incident response, threat detection, or threat hunting - preferably within fintech, BFSI, SaaS, or payments\nDeep expertise with SIEM platforms (Splunk, Elastic, Sentinel, Chronicle, or equivalent) including detection engineering and content tuning\nStrong experience leading end-to-end incident response in cloud-native environments (AWS and/or GCP)\nWorking knowledge of EDR, SOAR, and threat intelligence platforms, with the ability to select and deploy tooling in a greenfield environment\nPractical understanding of attacker TTPs (MITRE ATT&CK), common cloud attack paths, and payment-ecosystem threat scenarios\nDemonstrated ability to work independently as a sole contributor - scoping, prioritizing, and delivering without a surrounding team\nExcellent written and verbal communication skills, including incident reporting and executive-level updates\nYour Edge Over the Rest\nProfessional certifications such as GCIH, GCIA, GCFA, GNFA, GCDA, OSCP, CISSP, or equivalent\nPrior experience building or scaling a SOC function from the ground up, including vendor selection and MSSP management\nExperience with detection-as-code, SOAR playbook development, and infrastructure-as-code for security tooling\nExposure to RBI, PCI-DSS, SOC 2, and ISO 27001 control requirements that touch monitoring and incident response\nFamiliarity with digital forensics, malware analysis, and threat intelligence tradecraft\nThe Problem We’re Solving\nFinancial institutions today are held back by legacy systems that are slow, rigid, and expensive to scale. Launching or evolving credit, lending, and UPI products often takes months, requires heavy engineering effort, and limits the ability to create personalized customer experiences.\nAt the same time, customer expectations have changed - speed, flexibility, and tailored financial products are no longer optional. Banks and fintechs need infrastructure that allows them to innovate quickly, adapt continuously, and scale without friction.\nThis is where we come in.\nAt Vegapay, we are building modern, configurable fintech infrastructure that enables banks, NBFCs, and enterprises to design, launch, and manage credit and payment programs with ease. Our platform brings together flexibility, speed, and control - helping our partners unlock new growth opportunities and deliver personalized banking experiences at scale.\nThe Opportunity Ahead\nLead and shape high-impact engineering teams building real-world fintech infrastructure\nDrive both technical direction and team growth - with real ownership and decision-making authority\nWork on complex, scalable systems that directly power banking, credit, and payments\nCollaborate with strong product and leadership teams in a fast-moving, execution-first environment","description_format":"text","description_chars":6507,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Financial Software & Embedded Finance","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-10-28T14:18:35Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":30,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/vegapay-senior-soc-engineer","json_url":"https://alion.io/job/vegapay-senior-soc-engineer.json","meta":{"generated_at":"2026-11-03T09:11:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13162,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3795596},"rest":"https://alion.io/mcp/rest/get_company?id=3795596"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvegapay-senior-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvegapay-senior-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvegapay-senior-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vegapay-senior-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvegapay-senior-soc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3400520}},{"tool":"search_jobs","arguments":{"company":"vegapay.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3400520},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}