01Overview
SOC Engineer - 3
Detection Engineering, Incident Leadership & Operational Excellence
Location: Bangalore (Work From Office)
Reports to: CISO
Cashfree Payments operates mission-critical payment and API infrastructure under RBI and
PCI-DSS oversight. Our environment processes high-volume financial transactions and
demands high-fidelity detection, rapid response, and operational resilience.
We are building an automation-driven SOC designed to scale beyond traditional monitoring
models.
Role Summary
The SOC Engineer - 3 is a senior, hands-on technical expert pivotal in accelerating the defensive posture and operational maturity of the Cashfree Payments SOC. This role moves beyond traditional monitoring, focusing instead on Detection Engineering, Incident Response
Leadership, and operational scaling within our high-volume, regulated Fintech workplace.
We are looking for a system-thinker and builder who can autonomously architect scalable, automation-driven security solutions.
Key Responsibilities
Detection and Threat Engineering
Architect, develop, implement, and continually tune detection rules and correlation logic across SIEM and EDR platforms.
Proactively identify and remediate detection gaps, mapping coverage to the MITRE
ATT&CK; framework and leveraging threat intelligence, with a special focus on cloud (AWS), containerized (Kubernetes), and payment systems.
Implement advanced contextual alerting and enrichment strategies to drastically reduce false positive rates and combat alert fatigue.
Conduct proactive, hypothesis-driven hunting exercises across diverse telemetry sources (cloud, network, endpoint) to uncover covert threats.
Incident Response Leadership & Handling
Function as the primary technical lead for high-severity and complex security incidents, driving effective containment, eradication, and recovery strategies.
Execute in-depth log analysis, digital forensics triage, and timeline reconstruction to determine the root cause and scope of .
