Information Security Engineer

MoonPay, Bengaluru, Karnataka

The role

The Security Operations (SecOps) team at MoonPay is dedicated to ensuring the security and integrity of our systems and data in an increasingly complex digital landscape. Comprising a diverse group of professionals from various regions around the globe, our multicultural team brings together a wealth of expertise and perspectives to tackle security challenges effectively.

Our mission is to identify and mitigate vulnerabilities and threats while maintaining strict compliance with security policies and relevant regulations. By leveraging advanced security measures and proactive threat detection techniques, we work diligently to safeguard our infrastructure and protect our customers’ information.

What you will do

We are looking for an Information Security Engineer, SaaS & Integration Security, to join our Information Security team, focused on securing our internal SaaS ecosystem, third-party integrations, APIs, and automation workflows. In this role, you will own the security review process for new SaaS applications and integrations end to end, build out threat modeling and secure design practices across the integration lifecycle, and contribute to incident response for SaaS and identity-related events.

You are a hands-on individual contributor who is comfortable working across technical tooling, process development, and cross-functional collaboration.

SaaS and integration security
Set and maintain security standards for SaaS apps, integrations, APIs, plugins, and automation platforms.
Assess new applications and integrations before approval, reviewing architecture, data flows, and trust boundaries.
Evaluate OAuth scopes, tokens, service accounts, webhooks, extensions, and marketplace apps for excessive permissions, cross-tenant exposure, and unauthorized access.
Define approved security patterns for APIs, non-human identities, and automation workflows.
Assess AI assistants and third-party AI integrations accessing company systems.
Detects and reduces shadow IT and unsanctioned SaaS-to-SaaS connections.
Threat modeling and secure design
Facilitate risk-based threat modeling for SaaS apps, integrations, APIs, scripts, and internal tools.
Identify trust boundaries, abuse cases, and sensitive-data exposure; ensure risks have owners, mitigations, and timelines.
Provide secure design alternatives when proposed solutions create unacceptable risk.
Maintain reusable threat models and review checklists for common integration patterns.
Script and automation security
Review Python, JavaScript, shell, and low-code/no-code automations for secrets handling, injection risks, unsafe data processing, and excessive permissions.
Promote centralized secrets management, short-lived credentials, and least privilege.
Build automated checks for exposed secrets and insecure configurations.
Provide clear remediation guidance to engineers and automation owners.
Perform targeted testing of integrations, APIs, identity flows, and configurations.
Vendor / Third-Party Security
Conduct vendor and third-party security assessments, evaluating risk posture and reviewing security questionnaires.
Review vendor documentation (SOC 2 reports, pen test summaries) as part of the SaaS approval process.
Assess third-party access to company systems and data, including sub-processor risk.
Reassess vendor risk over time as scope or posture changes.
Partner with Legal and Privacy on contractual security requirements.
L2 Incident Response (Operational Role)
Monitor SaaS environments for suspicious activity, unauthorized integrations, and data-leakage risks
Actively participate in Security Operations activities as an L2 Incident Responder.
Lead incidents through all stages: identification, containment, eradication, recovery, and lessons learned.
Serve as the primary point of contact for the SOC regarding SIEM investigations, platform behavior, detection logic, and operational troubleshooting.
Support continuous improvement by translating incident learnings into better detections, dashboards, and playbooks.

What you need

About You

👉 Describe the ideal candidate’s qualifications, skills, experience, and behaviours that show strong culture alignment.

You’re an Information Security Engineer who can both build and operate at scale. You have strong expertise in DLP and are equally comfortable with leading incident response.

You will be working primarily on the following stack: Apple systems, Google Workspace, Slack, Mimecast Code42, Okta, Crowdstrike, Cloudflare WARP, Tenable Nessus and Jamf Pro.

Must-have experience and skills

Experiences
3+ years in SaaS security, application security, cloud security, or a related defensive security role
Experience conducting technical security reviews and risk-based threat modeling
Track record of assessing third-party integrations, APIs, and vendor risk before adoption
Experience validating security findings and driving remediation with engineering/business teams
Cybersecurity Principles
Strong grasp of least privilege, defense in depth, and trust boundary analysis
Solid understanding of identity and access concepts: OAuth, SAML, OIDC, SSO, MFA
Familiarity with common integration risks: excessive permissions, cross-tenant exposure, insecure data flows, injection, credential exposure, supply-chain compromise
Working knowledge of frameworks such as OWASP, MITRE ATT&CK, NIST, or CIS Controls
Technical Proficiency
Ability to read and review scripts in Python, JavaScript, or shell for security weaknesses
Understanding of secrets management, short-lived credentials, and secure API design
Hands-on experience securing identity and productivity platforms such as Okta, Google Workspace, and Google Cloud Platform
Experience assessing security and access controls in collaboration/SaaS tools such as Linear, Slack, Notion, Intercom, and Atlassian (Jira/Confluence)
Comfort building or using automated checks/tooling to detect exposed secrets, misconfigurations, or permission risks across a SaaS-first stack
Analytical Skills
Excellent analytical and problem-solving abilities.
Crisis Management
Ability to work effectively under pressure.
Capable of handling multiple incidents simultaneously.
Communication
Strong communication and interpersonal skills to collaborate with various teams.

Information Security Engineer

The role

Information Security Engineer

The role

What you will do

What you need

About You

Must-have experience and skills

Nice to have

Nice-to-have experience

Bonus Points

Recent recognition

Locations Supported

Work pattern

Pay and benefits

About MoonPay

Similar jobs at other companies

Application Security Engineer

Staff Security Operations Engineer

Senior DevSecOps Engineer

Principal Security Engineer

Security and Threat Operations Engineer

Security and Threat Operations Engineer

MoonPay