SalariesSign in
AboutPrivacyTerms
SOC Engineer (Incident Response)
Binance

SOC Engineer (Incident Response)

Hong Kong · Singapore · TaiwanRemoteFull-time
Posted Sep 7
Apply

Job Description

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

We’re looking for a security engineer with hands-on experience in Data Loss Prevention (DLP) and incident response, ideally within fintech, crypto, or high-security environments. The role goes beyond using commercial tools you’ll also design and build custom solutions, leverage automation, and adapt to emerging threats, including those driven by recent LLM/AI advancements.

Responsibilities

  • Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
  • Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
  • Build and maintain API-based integrations with security tools, AWS services, and internal systems

  • Support and enhance SIEM platforms for ingestion, alerting, and investigation

  • Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation

  • Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis

  • Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required

  • Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.

Requirements

  • 4+ years in a SOC or security operations role with incident response focus.
  • Proven experience with DLP design, deployment, and monitoring.
  • Strong programming skills (macOS Swift, Unix socket programming, scripting).
  • Hands-on threat hunting, forensic analysis, and APT detection experience.
  • Familiarity with SIEM, EDR, and cloud security architectures.
  • Knowledge of encryption, tokenization, and data classification methods.

Nice-to-have

  • 4+ years in a SOC or security operations role with incident response focus.
  • Proven experience with DLP design, deployment, and monitoring.
  • Strong programming skills (macOS Swift, Unix socket programming, scripting).
  • Hands-on threat hunting, forensic analysis, and APT detection experience.
  • Familiarity with SIEM, EDR, and cloud security architectures.
  • Knowledge of encryption, tokenization, and data classification methods.

Why Binance

• Shape the future with the world’s leading blockchain ecosystem

• Collaborate with world-class talent in a user-centric global organization with a flat structure

• Tackle unique, fast-paced projects with autonomy in an innovative environment

• Thrive in a results-driven workplace with opportunities for career growth and continuous learning

• Competitive salary and company benefits

• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.

Originally posted on Himalayas

View job

Senior Information Security Engineer

Job&Talent

  • Spain
  • Remote
  • Full-time
Apply
Sep 7
View job

Principal Security Researcher

GitLab

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

Director, AI & Security Development

Brown & Brown Insurance

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Manager, Information Security

Aderant

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Principal Security Engineer

HealthEquity

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Architect

Henry Schein

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Senior Security Engineer - Manufacturing Cybersecurity

Lifelancer

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Staff Security Researcher

GitLab

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

DevSecOps Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Risk Management Lead

Affirm

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Cybersecurity GRC Evaluator - Expert

mercor

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 7
View job

Technical Program Management, Guidewire Security

Guidewire Software

  • Canada
  • Remote
  • Full-time
Apply
Sep 7
View job

IT & Security Engineer (Contract)

Parachute Health

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Privacy Associate (Privacy Compliance Specialist, Sr)

Oregon Health & Science University

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Privacy & Cybersecurity, Sr. Counsel

Cardinal Health

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Information Security Manager - Network Security

Ferguson

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

Offensive Security Technical Lead

CACI International Inc

  • United States
  • Remote
  • Full-time
Apply
Sep 7
View job

SOC Engineer (Incident Response)

Binance

  • Hong Kong
  • Remote
  • Full-time
Apply
Sep 7
View job

Senior Security Engineer - AppSec (d/f/m)

vivenu

  • Germany
  • Remote
  • Full-time
Apply
Sep 7
View job

Security Vulnerability Engineer (R-00224)

True Zero Technologies

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job
C

Identity Governance and Administration (IGA) Engineer

Capgemini Technology Services

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Full Stack Engineer- IAM Solutions

AHEAD

  • India
  • Remote
  • Full-time
Apply
Sep 6
View job

Head of Information Security/Compliance

Frontera Health

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Director, Global Privacy Program

Consilio LLC

  • United States
  • Remote
Apply
Sep 6
View job

Cyber Risk Analyst

Sun King

  • India
  • Remote
  • Full-time
Apply
Sep 6
View job

CVE & Application Security AI Task Auditor - Freelance AI Trainer Project

Invisible Technologies

  • Worldwide
  • Remote
  • Contract
Apply
Sep 6
View job

Member of the Technical Staff, Security Operations

Anchorage Digital

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Staff Offensive Security Engineer

Samsara

  • United Kingdom
  • Remote
  • Full-time
Apply
Sep 6
View job

Cybersecurity Assessment Data Analyst

CACI International Inc

  • United States
  • Remote
  • Full-time
Apply
Sep 6
View job

Staff Security Engineer

Twilio

  • United States
  • Remote
  • Full-time
Apply
Sep 6
PreviousPage 113 of 127Next
Binance

SOC Engineer (Incident Response)

Hong Kong · Singapore · TaiwanRemoteFull-time
Posted Sep 7
Apply

Job Description

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

We’re looking for a security engineer with hands-on experience in Data Loss Prevention (DLP) and incident response, ideally within fintech, crypto, or high-security environments. The role goes beyond using commercial tools you’ll also design and build custom solutions, leverage automation, and adapt to emerging threats, including those driven by recent LLM/AI advancements.

Responsibilities

  • Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
  • Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
  • Build and maintain API-based integrations with security tools, AWS services, and internal systems

  • Support and enhance SIEM platforms for ingestion, alerting, and investigation

  • Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation

  • Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis

  • Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required

  • Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.

Requirements

  • 4+ years in a SOC or security operations role with incident response focus.
  • Proven experience with DLP design, deployment, and monitoring.
  • Strong programming skills (macOS Swift, Unix socket programming, scripting).
  • Hands-on threat hunting, forensic analysis, and APT detection experience.
  • Familiarity with SIEM, EDR, and cloud security architectures.
  • Knowledge of encryption, tokenization, and data classification methods.

Nice-to-have

  • 4+ years in a SOC or security operations role with incident response focus.
  • Proven experience with DLP design, deployment, and monitoring.
  • Strong programming skills (macOS Swift, Unix socket programming, scripting).
  • Hands-on threat hunting, forensic analysis, and APT detection experience.
  • Familiarity with SIEM, EDR, and cloud security architectures.
  • Knowledge of encryption, tokenization, and data classification methods.

Why Binance

• Shape the future with the world’s leading blockchain ecosystem

• Collaborate with world-class talent in a user-centric global organization with a flat structure

• Tackle unique, fast-paced projects with autonomy in an innovative environment

• Thrive in a results-driven workplace with opportunities for career growth and continuous learning

• Competitive salary and company benefits

• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.

Originally posted on Himalayas