What You Will Do

• Monitor real-time security alerts and investigate suspicious network, endpoint, and cloud activity through SIEM queries and threat-analysis tools to detect emerging threats.
• Identify, declare, document, and escalate security incidents in line with established incident-response (IR) playbooks, ensuring rapid containment and remediation.
• Analyze and remediate email-based threats including phishing, malware, spoofing attempts, and manage endpoint device security through EDR workflows and MDM policies.
• Act as the first-line point of contact for IT requests including password resets, account unlocks, hardware provisioning, email/collaboration-platform issues, and application access problems.
• Maintain accurate and timely ticket documentation, case notes, and incident summaries, contribute to runbook improvements, process documentation, and knowledge base articles to support team efficiency.
• Monitor external attack surface including brand-impersonation activity, fraudulent domain registrations, social-engineering threats, and validate honeytoken decoys to detect unauthorized lateral-movement attempts.

About You

• 2+ years of hands-on experience in a Security Operations Center, security monitoring, or incident-response role, demonstrated ability to triage alerts, investigate incidents, and execute incident-response procedures.
• Experience investigating data-exfiltration indicators including unusual file transfers, large data-volume anomalies, credential harvesting attempts, and unauthorized cloud-service access.
• Solid understanding of IT infrastructure concepts including networks (IP, DNS, ports, protocols), endpoints (macOS), and identity systems (IAM, SSO, MFA).
• Experience with incident-response frameworks (MITRE ATT&CK), incident-command models and familiarity with ticketing systems (Jira, Linear or similar).
• Detail-oriented with strong documentation discipline. Able to write clear, concise incident summaries and shift notes, reliable follow-through on tasks and comfortable asking clarifying questions rather than making assumptions.
• Proactive problem-solver and analytical-thinker with sound judgment about when to escalate vs. when to investigate further.

Nice-to-have experience

• Bachelor's degree in Cybersecurity, Computer Science or Information Technology.


• Proficiency with Okta for SSO/authentication workflows, admin console operations, and user access management is highly preferred.


• Experience with Jamf for Apple/macOS device management.


• Exposure to Google SecOps, DoControl, Code42 and Cloudflare email security.

Benefits & Perks 💡

• 💰 Competitive salary package
• 🤝 Equity package: financial freedom starts with our employees, so all employees have ownership at MoonPay
• 📈 Pay-for-performance equity bonus: those who drive outsized outcomes receive outsized rewards
• 🚀 Moonshot award: we honor exceptional impact. 10 employees twice a year, each earning a $250,000 equity grant
• 📊 Pension: employer contributions from day one
• 🎁 Employee referral program: refer great people, earn 10K in USDC
• 🏝 Flexible Time Off: choose when to work and when to switch off
• 🎂 Birthday leave: take the day off to celebrate you
• 🍼 Enhanced parental leave: more time with family, no second thought
• 🌍 Hybrid working schedule: work fully remotely or from your nearest Moonbase
• 🚆 Commuter benefits: public transport to and from the office
• 🩺 Private healthcare benefits: to protect you and your loved ones
• 🧘 Wellhub wellness membership: access to gyms, studios, classes, and wellness apps in one membership
• 🤖 Unlimited enterprise access to the latest AI tools: Claude, ChatGPT, Gemini and whatever's next
• 🍱 Lunch credit: meals covered on the days you're in the office
• 🪑 Home office setup allowance: build the home office of your dreams
• 👛 Remote working allowance: those working fully remotely get a little extra for utilities
• 🌕 Monthly product budget and zero-fee crypto transactions
• 📚 $1,000 Annual training budget: we support your learning journey
• 🎯 High Potential Program: structured development, mentorship, and stretch opportunities
• ✈️ Regular remote company offsites: high-impact in-person sessions and hackathons
• 🚲 (Ireland) Cycle to Work scheme: tax-efficient bike, gear, and safety kit
• 🔌 (UK) EV Salary Sacrifice: lease an electric vehicle through pre-tax salary