TSS Information Security Engineer, SaaS & Integrations

TSS Information Security Engineer, SaaS & Integrations

Full-time / Company: MoonPay

MoonPay builds the operating system for value movement — enabling crypto, stablecoins, tokenized assets and payments for 30M+ customers and 500+ partners. The company is regulated across multiple jurisdictions and uses AI broadly to drive efficiency and impact.

Applicants must be located in Bengaluru, India.

Responsibilities:

- Own the security review and approval process for new SaaS apps, integrations, APIs, plugins, and automation platforms.
- Define and maintain security standards, approved patterns, and threat models for integrations, non-human identities, and automation workflows.
- Assess OAuth scopes, tokens, webhooks, service accounts, marketplace apps, and AI integrations for excessive permissions and exposure.
- Conduct threat modeling, identify trust boundaries and abuse cases, and ensure risk owners and mitigations are assigned.
- Review scripts and automations (Python, JavaScript, shell, low-code) for secrets handling, injection risks, and unsafe processing; promote centralized secrets management.
- Act as L2 Incident Responder for SaaS/identity incidents: monitor, investigate, contain, and translate learnings into detections and playbooks.

Requirements:

- 3+ years in SaaS security, application/cloud security, or a related defensive security role.
- Experience conducting technical security reviews and risk-based threat modeling for integrations and APIs.
- Strong expertise in DLP and hands-on incident response experience.
- Comfortable working across technical tooling, process development, and cross-functional collaboration.

Stack:

Apple systems, Google Workspace, Slack, Mimecast, Code42, Okta, Crowdstrike, Cloudflare WARP, Tenable Nessus, Jamf Pro

📩 Apply