Moonpay
Moonpay
MoonPay is for builders with something to prove.
This isn't a "work on cool crypto stuff" company. It's a high-standards, high-velocity, high-accountability company building the operating system for value movement. If the internet moves information, we move value: crypto, stablecoins, tokenized assets, and whatever comes next. Four offerings make that real: fund, tokenize, trade, and spend. 30M+ customers and 500+ ecosystem partners run on us. Licensed in the U.S. Regulated across the UK, EU, Canada, and Australia.
AI is the default operating mode here. It's woven into every role, and we expect you to use it daily. It handles the manual work so you can deliver on what actually matters.
You'll thrive here if outcomes excite you more than process, if impact motivates you more than titles, and if you want hard problems, real ownership, and teammates who love winning, building, and doing it together.
The bar is high. The pace is real. We're building for what's next, for humans and agents.
Recent recognition:
Forbes' America's Best Startup Employers 2026 . 2nd in Crypto Services on Fortune's inaugural Crypto 100,
The Sunday Times Best Places to Work two years running.
Research has shown that women are less likely than men to apply for this role if they do not have experience in 100% of these areas. Please know that this list is indicative, and that we would still love to hear from you even if you feel that you are only a 75% match. Skills can be learned, diversity cannot.
India - Bengaluru
Relocation available: No
Work pattern:
This role will be on-site
👉 Join the Security Operations Center as a Senior SOC Analyst, a critical leadership role responsible for protecting the organization against security threats while mentoring the SOC team and driving operational excellence across 24×7 rotation. You'll be at the intersection of security, operations, and team leadership — monitoring real-time alerts, investigating complex incidents, responding to escalations, supporting infrastructure operations, and guiding SOC analysts to develop their expertise. This role is perfect for someone who thrives in a fast-paced environment, takes ownership of security outcomes, and is passionate about building a high-performing SOC team. You'll have the opportunity to shape processes, mentor the next generation of security analysts, and directly influence how the team scales and matures.
Monitor real-time security alerts and investigate suspicious network, endpoint, and cloud activity through SIEM queries and threat-analysis tools; identify patterns and systemic detection gaps to improve overall SOC effectiveness.
Identify, declare, document, and escalate security incidents in line with established incident-response playbooks; lead incident investigation for complex or critical cases and mentor junior analysts on investigative techniques.
Analyze and remediate email-based threats including phishing, malware, spoofing attempts, and manage endpoint device security through EDR workflows and MDM policies, serve as the escalation point for complex email/endpoint incidents.
Review and escalate cases from SOC Analysts, provide real-time guidance on incident handling, case-by-case coaching, and mentoring to help analysts develop deeper technical and investigative skills.
Conduct regular knowledge-sharing sessions with the SOC team on threat trends, detection improvements, incident-response techniques, and lessons learned from recent incidents.
Set up and manage shift schedules for SOC Analysts, ensure adequate coverage, address scheduling conflicts, and optimize team workload distribution across 24×7 rotation.
Maintain accurate and timely incident documentation,create and improve runbooks, process documentation, and knowledge base articles to support team efficiency and consistency.
Monitor external attack surface including brand-impersonation activity, fraudulent domain registrations, and social-engineering threats; validate honeytoken decoys and mentor analysts on external threat detection.
Provide regular performance feedback, skill-development recommendations, and progress tracking to SOC Manager; identify training needs, certification opportunities, and career-growth paths for team members.
Must-have experience and skills
Hands-on experience in a Security Operations Center, security monitoring, incident-response, or threat-analysis role, demonstrated ability to triage complex incidents, lead investigations, and mentor junior analysts.
Proven experience investigating advanced-threat scenarios including data-exfiltration indicators, lateral-movement attempts, privilege-escalation activities, credential harvesting, and unauthorized cloud-service access.
Advanced understanding of IT infrastructure concepts including networks (IP, DNS, ports, protocols), endpoints, identity systems (IAM, SSO, MFA), and cloud environments.
Strong leadership and mentoring skills with the ability to guide analysts, provide constructive feedback, explain complex concepts clearly, and help team members improve performance and grow technically.
Excellent communication and documentation discipline, able to write clear incident summaries, shift notes, and runbooks; comfortable presenting metrics and insights to senior leadership.
Proactive problem-solver and analytical thinker with sound judgment about escalation priorities, resource allocation, and systemic process improvements, demonstrates ownership of SOC team outcomes.
Experience managing shift schedules, on-call rotations, or team operations; comfortable with administrative/organizational tasks alongside technical work.
Nice-to-have experience
Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field.
1+ year of team-lead, shift-lead, or mentoring experience in a security or operations role.
Proficiency with Okta for SSO/authentication workflows, admin console operations, and user access management.
Exposure to advanced tools: Google SecOps, DoControl, Code42, Cloudflare email security, CrowdStrike Falcon, or incident.io.