9 months ago
Bengaluru, IndiaMid Level / Senior
Responsibilities
- Work across information security with a focus on threat detection, response, and security telemetry across infrastructure, cloud, and data.
- Investigate internal and external threats, partner on remediation, and design preventive controls for recurring or systemic issues.
- Design, build, and continuously improve detection use cases across cloud, endpoint, identity, and network telemetry.
- Develop detection ideas from adversary research, emerging attack techniques, industry incidents, and threat intelligence.
- Lead and participate in incident response, root-cause analysis, and post-incident preventive improvements.
- Enhance detection, monitoring, and response capabilities and automate incident response workflows with playbooks and orchestration.
- Build security analytics solutions using open source tools for log parsing, event correlation, and threat detection.
- Conduct threat hunting based on adversary tactics, techniques, and procedures.
- Support security awareness, security engineering culture, and compliance efforts including PCI DSS and ISO 27001.
Requirements
- 2 to 6 years of information security experience focused on threat detection and response.
- Hands-on experience detecting and responding to threats across AWS or other cloud environments, Windows/Linux/macOS endpoints, and network telemetry.
- Exposure to EDR, IDS/IPS, and SIEM or centralized logging platforms such as Splunk, ELK, and Sentinel, including detection pipeline development.
- Proficiency in at least one of Python, Go, or Bash.
- Understanding of MITRE ATT&CK, the cyber kill chain, and the diamond model.
- Experience designing and tuning detection rules, threat hunting, automation, enrichment, regex creation, and false-positive reduction.
- Experience handling the complete incident response lifecycle from detection through remediation and reporting.
- Ability to use data-driven analysis and communicate with technical and non-technical stakeholders across engineering, product, and business teams.
- Proactive learning about security news, breach reports, tools, and attacker research, demonstrated through sources such as GitHub, blogs, research, or talks.
- Exposure to AI-driven threats, digital forensics, or malware analysis is preferred.
Benefits
- In-house pantry with lunch and dinner provided.
- Paid sick leave and comprehensive health insurance.
- Flexible work timing with no fixed work hours stated.
- Employees receive their salaries before their joining date.
About CRED
CRED builds a consumer fintech app for creditworthy users in India to pay credit card and household bills, track spending, and earn rewards. Its products span payments, credit score tracking, and access to offers and credit lines through banking and NBFC partners; revenue comes from payments and merchant and lending partnerships. Founded in 2018 and headquartered in Bengaluru, it is privately held and focused on the Indian market.