Information Security Engineer, DLP & Insider Risk

About the Opportunity

What You Will Do

• We are looking for an Information Security Engineer, DLP & Insider Risk, to join our Information Security team, focused on protecting sensitive data and reducing insider risk across the organization. In this role, you will own our Data Loss Prevention program end to end, build out our Insider Risk and UEBA capabilities, and contribute to incident response. You are a hands-on individual contributor who is comfortable working across technical tooling, process development, and cross-functional collaboration.
• Data Loss Prevention Deploy, configure, optimize, and maintain Mimecast Code42, Slack, Google Workspace to protect against data exfiltration. Design and roll out technical controls to prevent data leakage from endpoints across email, browsers, and messaging applications. Implement and manage Google Workspace Data Loss Prevention policies and Labels. Apply a solid understanding of GRC frameworks, data management principles, and data classification schemes to inform DLP strategy and policy.
• Deploy, configure, optimize, and maintain Mimecast Code42, Slack, Google Workspace to protect against data exfiltration.
• Design and roll out technical controls to prevent data leakage from endpoints across email, browsers, and messaging applications.
• Implement and manage Google Workspace Data Loss Prevention policies and Labels.
• Apply a solid understanding of GRC frameworks, data management principles, and data classification schemes to inform DLP strategy and policy.
• Insider Risk & UEBA Familiarity with UEBA concepts and the ability to correlate signals from SaaS platforms, endpoints, and email security tools to identify and investigate risky user behavior. Develop and manage a pre-hire insider risk process in partnership with Talent Acquisition to identify risk signals early in the hiring pipeline. Build and maintain a defensive program to address deepfake threats, including detection capabilities, incident response procedures, and employee awareness. Collaborate with the Security Awareness team to promote healthy data-sharing practices across the organization.
• Familiarity with UEBA concepts and the ability to correlate signals from SaaS platforms, endpoints, and email security tools to identify and investigate risky user behavior.
• Develop and manage a pre-hire insider risk process in partnership with Talent Acquisition to identify risk signals early in the hiring pipeline.
• Build and maintain a defensive program to address deepfake threats, including detection capabilities, incident response procedures, and employee awareness.
• Collaborate with the Security Awareness team to promote healthy data-sharing practices across the organization.
• L2 Incident Response (Operational Role) Actively participate in Security Operations activities as an L2 Incident Responder. Lead incidents through all stages: identification, containment, eradication, recovery, and lessons learned. Serve as the primary point of contact for the SOC regarding SIEM investigations, platform behavior, detection logic, and operational troubleshooting. Support continuous improvement by translating incident learnings into better detections, dashboards, and playbooks.
• Actively participate in Security Operations activities as an L2 Incident Responder.
• Lead incidents through all stages: identification, containment, eradication, recovery, and lessons learned.
• Serve as the primary point of contact for the SOC regarding SIEM investigations, platform behavior, detection logic, and operational troubleshooting.
• Support continuous improvement by translating incident learnings into better detections, dashboards, and playbooks.

About You

Must-have experience and skills

• Experiences 3–5 years of experience in information security, with a focus on data protection, DLP, or insider threat. Experience building and operationalizing DLP programs, including policy development, tuning detection rules, managing alerts, and documenting response runbooks for data exfiltration scenarios.
• 3–5 years of experience in information security, with a focus on data protection, DLP, or insider threat.
• Experience building and operationalizing DLP programs, including policy development, tuning detection rules, managing alerts, and documenting response runbooks for data exfiltration scenarios.
• Cybersecurity Principles Working knowledge of GRC principles, data classification frameworks, and regulatory requirements. Experience with data classification standards and the ability to translate policies into technical controls. Familiarity with security frameworks such as NIST, ISO 27001, or SOC 2. Understanding of relevant regulatory requirements such as GDPR, CCPA, or HIPAA.
• Working knowledge of GRC principles, data classification frameworks, and regulatory requirements.
• Experience with data classification standards and the ability to translate policies into technical controls.
• Familiarity with security frameworks such as NIST, ISO 27001, or SOC 2.
• Understanding of relevant regulatory requirements such as GDPR, CCPA, or HIPAA.
• Technical Proficiency Google Workspace experience in the areas of responsibility for at least 1 year. Exposure to SSPM tooling and CIS hardening standards for SaaS and endpoint environments. Proficiency with SIEM such as Google SecOps for security operations and investigation workflows. Familiarity with email security gateway solutions for threat prevention, filtering, and analysis. Hands-on experience with Okta for identity and access management in a security context. Experience with YARA rules or similar pattern-matching detection methods.
• Google Workspace experience in the areas of responsibility for at least 1 year.
• Exposure to SSPM tooling and CIS hardening standards for SaaS and endpoint environments.
• Proficiency with SIEM such as Google SecOps for security operations and investigation workflows.
• Familiarity with email security gateway solutions for threat prevention, filtering, and analysis.
• Hands-on experience with Okta for identity and access management in a security context.
• Experience with YARA rules or similar pattern-matching detection methods.
• Analytical Skills Excellent analytical and problem-solving abilities.
• Excellent analytical and problem-solving abilities.
• Crisis Management Ability to work effectively under pressure. Capable of handling multiple incidents simultaneously.
• Ability to work effectively under pressure.
• Capable of handling multiple incidents simultaneously.
• Communication Strong communication and interpersonal skills to collaborate with various teams.
• Strong communication and interpersonal skills to collaborate with various teams.

Nice-to-have experience

Bonus Points

Benefits & Perks 💡

• 💰 Competitive salary package
• 🤝 Equity package: financial freedom starts with our employees, so all employees have ownership at MoonPay
• 📈 Pay-for-performance equity bonus: those who drive outsized outcomes receive outsized rewards
• 🚀 Moonshot award: we honor exceptional impact. 10 employees twice a year, each earning a $250,000 equity grant
• 📊Pension: employer contributions from day one
• 🎁Employee referral program: refer great people, earn 10K in USDC
• 🏝 Flexible Time Off: choose when to work and when to switch off
• 🎂 Birthday leave: take the day off to celebrate you
• 🍼 Enhanced parental leave: more time with family, no second thought
• 🌍 Hybrid working schedule: work fully remotely or from your nearest Moonbase
• 🚆 Commuter benefits: public transport to and from the office
• 🩺 Private healthcare benefits: to protect you and your loved ones
• 🧘 Wellhub wellness membership: access to gyms, studios, classes, and wellness apps in one membership
• 🤖 Unlimited enterprise access to the latest AI tools: Claude, ChatGPT, Gemini and whatever's next
• 🍱 Lunch credit: meals covered on the days you're in the office
• 🪑 Home office setup allowance: build the home office of your dreams
• 👛 Remote working allowance: those working fully remotely get a little extra for utilities
• 🌕 Monthly product budget and zero-fee crypto transactions
• 📚 $1,000 Annual training budget: we support your learning journey
• 🎯 High Potential Program: structured development, mentorship, and stretch opportunities
• ✈️ Regular remote company offsites: high-impact in-person sessions and hackathons
• 🚲 (Ireland) Cycle to Work scheme: tax-efficient bike, gear, and safety kit
• 🔌 (UK) EV Salary Sacrifice: lease an electric vehicle through pre-tax salary