SOC Security Engineer
at Binance
Posted 15 hours ago
No clicks
- Compensation
- Not specified
- City
- Country
- Not specified
Currency: Not specified
**SOC Security Engineer (Binance) - Design & Automate Security Tools for Global Crypto Platform** Design, develop, and maintain security automation for Binance, the world's largest crypto exchange. Key responsibilities include: - Creating and managing SOC tooling integrations with SIEM, EDR, cloud services, and internal security platforms - Building services and scripts to automate alert enrichment, correlation, response, and investigation workflows - Developing, maintaining, and enhancing API-based integrations with security tools, AWS services, and internal systems Requires 5+ years of relevant experience, strong proficiency in scripting languages, and familiarity with security monitoring tools. A deep understanding of SOC processes and AWS services is essential. Join a dynamic, global team committed to advancing blockchain and digital asset technology.
Responsibilities
- Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
- Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
- Build and maintain API-based integrations with security tools, AWS services, and internal systems
- Support and enhance SIEM platforms for ingestion, alerting, and investigation
- Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
- Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
- Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required
Requirements
- Programming & Engineering Skills: Strong hands-on programming experience in one or more languages, such as: Python (preferred)/Golang/Java
- Experience writing production-quality code, not just ad-hoc scripts, solid experience with RESTful APIs, including authentication, pagination, rate limiting, and error handling, familiarity with modern IDEs (VS Code, IntelliJ, PyCharm) and debugging techniques
- Experience with Git-based version control and collaborative development workflows, Cloud, CI/CD & Containerization, practical experience working with AWS environments, including common services such as IAM, EC2, S3, Lambda, and CloudWatch, experience building, deploying, and maintaining Docker-based applications
- Security & SOC Knowledge: Hands-on experience working in or closely with a Security Operations Center (SOC), like experience using SIEM platforms and familiarity with EDR solutions, understanding of common security telemetry sources
- Platform & System Skills, experience developing or extending security platforms or internal security tools, solid Linux fundamentals
