Information Security Engineer – DLP & Insider Risk

About the role

MoonPay’s Security Operations team is looking for an Information Security Engineer focused on Data Loss Prevention (DLP) and Insider Risk. You will own the end‑to‑end DLP program, build UEBA capabilities, and contribute to L2 incident response, helping protect sensitive data across the organization.

Key responsibilities

• Deploy, configure and maintain Mimecast, Code42, Slack and Google Workspace to prevent data exfiltration and manage DLP policies.
• Design technical controls for endpoint, email, browser and messaging applications to stop data leakage.
• Develop and manage insider‑risk processes, including pre‑hire risk assessment and deep‑fake threat detection.
• Act as an L2 Incident Responder, leading incidents through identification, containment, eradication, recovery and lessons learned.
• Collaborate with Security Awareness, IT and Talent Acquisition to promote secure data‑sharing practices.

Required profile

• 3–5 years of experience in information security with a focus on DLP, data protection or insider threat.
• Hands‑on experience building and operationalizing DLP programs, including policy creation, rule tuning and alert management.
• Solid understanding of GRC principles, data classification frameworks and relevant regulations such as GDPR, CCPA or HIPAA.
• Ability to work under pressure, manage multiple incidents simultaneously and communicate effectively with cross‑functional teams.

Required skills

• Mimecast, Code42, Slack, Google Workspace
• Okta, Crowdstrike, Cloudflare WARP, Tenable Nessus, Jamf Pro
• SIEM platforms (Google SecOps), YARA rule development
• UEBA concepts and tools for detecting risky user behavior