SOC Analyst – Security Operations Center

About the role

Join MoonPay’s Security Operations Center as a SOC Analyst, monitoring real‑time alerts and responding to incidents in a 24×7 follow‑the‑sun environment. You will work at the intersection of security and IT operations, protecting the company’s infrastructure and supporting internal service requests.

Key responsibilities

• Monitor security alerts across network, endpoint and cloud environments using SIEM and threat‑analysis tools, and investigate suspicious activity.
• Identify, document, and escalate security incidents following established IR playbooks to ensure rapid containment.
• Analyze and remediate email‑based threats such as phishing, malware and spoofing, and manage endpoint security via EDR and MDM policies.
• Provide first‑line IT support for password resets, account unlocks, hardware provisioning and application access issues.
• Maintain accurate ticket documentation, case notes and incident summaries, and contribute to run‑book and knowledge‑base improvements.
• Monitor external attack surface, including brand impersonation, fraudulent domains and honeytoken decoys.

Required profile

• 2+ years of hands‑on experience in a SOC, security monitoring or incident‑response role.
• Strong understanding of IT infrastructure concepts such as networking (IP, DNS, ports, protocols), macOS endpoints and identity systems (IAM, SSO, MFA).
• Experience with incident‑response frameworks (MITRE ATT&CK) and ticketing systems (Jira, Linear or similar).
• Detail‑oriented documentation skills and the ability to write clear incident summaries.

Required skills

• SIEM query and threat‑analysis tools.
• Endpoint Detection & Response (EDR) and Mobile Device Management (MDM) workflows.
• MITRE ATT&CK framework.
• Ticketing platforms such as Jira or Linear.
• Okta for SSO/authentication administration.
• Jamf for macOS device management.
• Familiarity with Google SecOps, DoControl, Code42 and Cloudflare email security.