SOC Engineer 3

About the role

The SOC Engineer - 3 is a senior, hands-on technical expert pivotal in accelerating the defensive posture and operational maturity of the Cashfree Payments SOC. This role moves beyond traditional monitoring, focusing instead on Detection Engineering, Incident Response Leadership, and operational scaling within our high-volume, regulated Fintech environment.

What you'll do

• Detection and Threat Engineering
• Architect, develop, implement, and continually tune detection rules and correlation logic across SIEM and EDR platforms
• Proactively identify and remediate detection gaps, mapping coverage to the MITRE
• ATT&CK framework and leveraging threat intelligence, with a special focus on cloud (AWS), containerized (Kubernetes), and payment systems
• Implement advanced contextual alerting and enrichment strategies to drastically reduce false positive rates and combat alert fatigue

What you need

• 7–13 yrs of experience
• Incident response
• SIEM
• Python
• EDR
• Splunk
• Firewalls
• B.Tech or B.E.

Good to have

• SOP writing
• AWS
• TCP/IP
• Kubernetes