Information Security Engineer, DLP & Insider Risk
MoonPay
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Benefits offered by this job
Job summary
MoonPay is seeking an Information Security Engineer to own the Data Loss Prevention program and lead Insider Risk and UEBA initiatives. You will work hands-on across Google Workspace, Mimecast Code42, Okta, CrowdStrike, and other security tools to protect sensitive data and respond to incidents.
You will collaborate with IT and SecOps to enforce policies, improve detections, and educate on secure data practices in a fast-paced crypto payments environment.
Qualifications
- 3–5 years of information security experience focusing on data protection, DLP or insider threat.
- Experience building and operationalizing DLP programs, including policy development and detections.
- Knowledge of regulatory requirements (GDPR, CCPA, HIPAA) and risk management frameworks.
- Strong technical and cross-functional collaboration skills.
Responsibilities
- Own Data Loss Prevention program end to end.
- Deploy, tune, and maintain DLP across email, endpoints, and cloud apps.
- Design and roll out data leakage controls; implement GH policy and labels.
- Develop and manage insider risk and UEBA capabilities.
- Lead L2 incident response activities and SOC liaison for investigations.
- Improve detections, dashboards, and playbooks from incident learnings.
- Promote secure data-sharing practices across the organization.
Skills
Education
Tools
Job description
About MoonPay
MoonPay is for builders with something to prove.
This isn't a work on cool crypto stuff company. It's a high-standards, high-velocity, high-accountability company building the operating system for value movement. If the internet moves information, we move value: crypto, stablecoins, tokenized assets, and whatever comes next. Four offerings make that real: fund, tokenize, trade, and spend. 30M+ customers and 500+ ecosystem partners run on us. Licensed in the U.S. Regulated across the UK, EU, Canada, and Australia.
AI is the default operating mode here. It's woven into every role, and we expect you to use it daily. It handles the manual work so you can deliver on what actually matters.
You\'ll thrive here if outcomes excite you more than process, if impact motivates you more than titles, and if you want hard problems, real ownership, and teammates who love winning, building, and doing it together.
The bar is high. The pace is real. We\'re building for what\'s next, for humans and agents. Recent recognition: Forbes\' America\s Best Startup Employers 2026. 2nd in Crypto Services on Fortune\'s inaugural Crypto 100. The Sunday Times Best Places to Work (two years running). Research has shown that women are less likely than men to apply for this role if they do not have experience in 100% of these areas. Please know that this list is indicative, and that we would still love to hear from you even if you feel that you are only a 75% match. Skills can be learned, diversity cannot.
- India, Bengaluru
Relocation available: No
Work pattern:
- This role will be in the office.
- Working hours: 6:30 PM to 3:30 AM IST
The Security Operations (SecOps) team at MoonPay is dedicated to ensuring the security and integrity of our systems and data in an increasingly complex digital landscape. Comprising a diverse group of professionals from various regions around the globe, our multicultural team brings together a wealth of expertise and perspectives to tackle security challenges effectively.
Our mission is to identify and mitigate vulnerabilities and threats while maintaining strict compliance with security policies and relevant regulations. By leveraging advanced security measures and proactive threat detection techniques, we work diligently to safeguard our infrastructure and protect our customers’ information.
In collaboration with the IT team and other departments, we foster a culture of security awareness, sharing best practices and ensuring that everyone at MoonPay understands their role in maintaining a secure environment.
Our key responsibilities include incident response, security monitoring, endpoint security, VPN, vulnerability management, data leak protection and third-party risk management (TPRM), all of which contribute to our overarching goal: to create a secure environment for our employees, clients and partners.
Join us in our commitment to security excellence and help us build a safer future in the blockchain and payments industry!
We are looking for an Information Security Engineer, DLP & Insider Risk, to join our Information Security team, focused on protecting sensitive data and reducing insider risk across the organization. In this role, you will own our Data Loss Prevention program end to end, build out our Insider Risk and UEBA capabilities, and contribute to incident response. You are a hands-on individual contributor who is comfortable working across technical tooling, process development, and cross-functional collaboration.
- Data Loss Prevention
- Deploy, configure, optimize, and maintain Mimecast Code42, Slack, Google Workspace to protect against data exfiltration.
- Design and roll out technical controls to prevent data leakage from endpoints across email, browsers, and messaging applications.
- Implement and manage Google Workspace Data Loss Prevention policies and Labels.
- Apply a solid understanding of GRC frameworks, data management principles, and data classification schemes to inform DLP strategy and policy.
- Insider Risk & UEBA
- Familiarity with UEBA concepts and the ability to correlate signals from SaaS platforms, endpoints, and email security tools to identify and investigate risky user behavior.
- Develop and manage a pre-hire insider risk process in partnership with Talent Acquisition to identify risk signals early in the hiring pipeline.
- Build and maintain a defensive program to address deepfake threats, including detection capabilities, incident response procedures, and employee awareness.
- Collaborate with the Security Awareness team to promote healthy data-sharing practices across the organization.
- L2 Incident Response (Operational Role)
- Actively participate in Security Operations activities as an L2 Incident Responder.
- Lead incidents through all stages: identification, containment, eradication, recovery, and lessons learned.
- Serve as the primary point of contact for the SOC regarding SIEM investigations, platform behavior, detection logic, and operational troubleshooting.
- Support continuous improvement by translating incident learnings into better detections, dashboards, and playbooks.
Describe the ideal candidate’s qualifications, skills, experience, and behaviours that show strong culture alignment.
You’re an Information Security Engineer who can both build and operate at scale. You have strong expertise in DLP and are equally comfortable with leading incident response.
You will be working primarily on the following stack: Apple systems, Google Workspace, Slack, Mimecast Code42, Okta, Crowdstrike, Cloudflare WARP, Tenable Nessus and Jamf Pro.
Must-have experience and skills
- Experiences
- 3–5 years of experience in information security, with a focus on data protection, DLP, or insider threat.
- Experience building and operationalizing DLP programs, including policy development, tuning detection rules, managing alerts, and documenting response runbooks for data exfiltration scenarios.
- Cybersecurity Principles
- Working knowledge of GRC principles, data classification frameworks, and regulatory requirements.
- Experience with data classification standards and the ability to translate policies into technical controls.
- Familiarity with security frameworks such as NIST, ISO 27001, or SOC 2.
- Understanding of relevant regulatory requirements such as GDPR, CCPA, or HIPAA.
- Technical Proficiency
- Google Workspace experience in the areas of responsibility for at least 1 year.
- Exposure to SSPM tooling and CIS hardening standards for SaaS and endpoint environments.
- Proficiency with SIEM such as Google SecOps for security operations and investigation workflows.
- Familiarity with email security gateway solutions for threat prevention, filtering, and analysis.
- Hands-on experience with Okta for identity and access management in a security context.
- Experience with YARA rules or similar pattern-matching detection methods.
- Analytical Skills
- Excellent analytical and problem-solving abilities.
- Crisis Management
- Ability to work effectively under pressure.
- Capable of handling multiple incidents simultaneously.
- Communication
- Strong communication and interpersonal skills to collaborate with various teams.
Nice-to-have experience
- Education
- Bachelor\'s degree in Computer Science, Information Security, or a related field. Equivalent work experience will be considered.
- Security Frameworks
- Experience with frameworks such as ISO 27001, SOC 2, and PCI-DSS.
- Responsible for defining and implementing key security controls.
- Incident Response
- Practical incident response experience including triage, investigation, containment, and communications.
- Vulnerability Management
- Identifying, prioritizing, and automating remediation of security vulnerabilities.
- Vendor / Third-Party Security
- Experience conducting vendor and third-party security assessments, including evaluating risk posture, reviewing security questionnaires, and ensuring third parties meet organizational security standards.
Optional extras that would help a candidate stand out (keep this short).
- Certifications
- CompTIA Security+, CySA+, CCSP or equivalent certifications are a plus.
- GCIH, GCFA are a plus.
- Technical Proficiency
- Proven experience with tools such as:
- Google Workspace / Cloud Platform
- Mimecast Code42
- Slack
- Okta
- Crowdstrike
- Cloudflare Zero Trust
- Tenable Nessus
- Competitive salary package
- Equity package: financial freedom starts with our employees, so all employees have ownership at MoonPay
- Pay-for-performance equity bonus: those who drive outsized outcomes receive outsized rewards
- Moonshot award: we honor exceptional impact. 10 employees twice a year, each earning a $250,000 equity grant
- Pension: employer contributions from day one
- Employee referral program: refer great people, earn 10K in USDC
- Flexible Time Off: choose when to work and when to switch off
- Birthday leave: take the day off to celebrate you
- Enhanced parental leave: more time with family, no second thought
- Hybrid working schedule: work fully remotely or from your nearest Moonbase
- Commuter benefits: public transport to and from the office
- Private healthcare benefits: to protect you and your loved ones
- Wellhub wellness membership: access to gyms, studios, classes, and wellness apps in one membership
- Unlimited enterprise access to the latest AI tools: Claude, ChatGPT, Gemini and whatever\'s next
- Lunch credit: meals covered on the days you\'re in the office
- Home office setup allowance: build the home office of your dreams
- Remote working allowance: those working fully remotely get a little extra for utilities
- Monthly product budget and zero-fee crypto transactions
- $1,000 Annual training budget: we support your learning journey
- High Potential Program: structured development, mentorship, and stretch opportunities
- Regular remote company offsites: high-impact in-person sessions and hackathons
- (Ireland) Cycle to Work scheme: tax-efficient bike, gear, and safety kit
- (UK) EV Salary Sacrifice: lease an electric vehicle through pre-tax salary
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
