SOC Security Engineer
at Binance
Posted 8 hours ago
No clicks
- Compensation
- Not specified
- City
- Not specified
- Country
- Not specified
Currency: Not specified
Binance is hiring a SOC Security Development Engineer to join the Security Operations team. The role focuses on security platform development, automation, and engineering integration with internal tools, and participates in incident response and SOC on-call operations. The ideal candidate has hands-on programming skills and experience extending security platforms (SIEM, EDR) and cloud security services via APIs, with responsibilities including automation, API integrations, alert enrichment, and investigation workflows.
Responsibilities
- Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
- Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
- Build and maintain API-based integrations with security tools, AWS services, and internal systems
- Support and enhance SIEM platforms for ingestion, alerting, and investigation
- Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
- Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
- Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required
- Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.
Requirements
- Programming & Engineering Skills: Strong hands-on programming experience in one or more languages, such as: Python (preferred), Golang, Java.
- Experience writing production-quality code, not just ad-hoc scripts, solid experience with RESTful APIs, including authentication, pagination, rate limiting, and error handling, familiarity with modern IDEs (VS Code, IntelliJ, PyCharm) and debugging techniques
- Experience with Git-based version control and collaborative development workflows, Cloud, CI/CD & Containerization, practical experience working with AWS environments, including common services such as IAM, EC2, S3, Lambda, and CloudWatch, experience building, deploying, and maintaining Docker-based applications
- Security & SOC Knowledge: Hands-on experience working in or closely with a Security Operations Center (SOC), like experience using SIEM platforms and familiarity with EDR solutions, understanding of common security telemetry sources
- Platform & System Skills, experience developing or extending security platforms or internal security tools, solid Linux fundamentals

