SOC Analyst

The role

You will monitor security alerts and investigate suspicious activity in a 24x7 Security Operations Center. You will also handle first-line IT support requests and document incidents.

What you will do

• Monitor real-time security alerts and investigate suspicious network, endpoint and cloud activity using SIEM queries and threat-analysis tools.
• Identify, declare, document and escalate security incidents following incident-response playbooks.
• Analyze and remediate email-based threats such as phishing, malware and spoofing.
• Manage endpoint security through EDR workflows and MDM policies.
• Act as first-line contact for IT requests such as password resets, account unlocks, hardware provisioning and application access.
• Maintain accurate ticket documentation, case notes and incident summaries.
• Contribute to runbooks, process documentation and knowledge base articles.
• Monitor the external attack surface, including brand impersonation, fraudulent domains and social-engineering threats.
• Validate honeytoken decoys to detect unauthorized lateral-movement attempts.

Required qualifications

• 2+ years of hands-on experience in a Security Operations Center, security monitoring or incident-response role.
• Ability to triage alerts, investigate incidents and execute incident-response procedures.
• Experience investigating data-exfiltration indicators, credential harvesting and unauthorized cloud-service access.
• Solid understanding of IP, DNS, ports and protocols.
• Experience with endpoints (macOS) and identity systems (IAM, SSO, MFA).
• Experience with incident-response frameworks such as MITRE ATT&CK and incident-command models.
• Familiarity with ticketing systems such as Jira or Linear.
• Strong documentation discipline and ability to write clear incident summaries and shift notes.
• Proactive, analytical problem-solver with sound judgment on when to escalate.

Nice to have

• Bachelor's degree in Cybersecurity, Computer Science or Information Technology.
• Highly preferred: proficiency with Okta for SSO, authentication workflows and user access management.
• Experience with Jamf for Apple/macOS device management.
• Exposure to Google SecOps, DoControl, Code42 and Cloudflare email security.

Benefits

• Competitive salary package.
• Equity package, with ownership for all employees.
• Pay-for-performance equity bonus.
• Moonshot award: a $250,000 equity grant for 20 employees a year.
• Pension with employer contributions from day one.
• Employee referral program: 10K in USDC per referral.
• Flexible time off and end-of-year Recharge Period.
• Birthday leave and enhanced parental leave.
• Hybrid working schedule, or fully remote from the nearest Moonbase.
• Private healthcare benefits.
• Wellhub wellness membership.
• Enterprise access to the latest AI tools.

Before you apply

• The posting states the role is on-site and involves rotational shifts in a 24x7 model.
• The posting states relocation is not available.

About the company

MoonPay builds infrastructure for moving value, including crypto, stablecoins and tokenized assets. It states it has 30M+ customers and is licensed in the U.S. and regulated across several other regions.