SOC Security Engineer

About the role

Binance is seeking a SOC Security Engineer to design, develop, and maintain security automation and SOC tooling across its global blockchain ecosystem. You will work closely with SOC analysts to translate operational needs into scalable engineering solutions, ensuring rapid detection and response to security incidents.

Key responsibilities

• Design, develop, and maintain security automation, SIEM, EDR, and cloud integrations.
• Build services, scripts, and pipelines for alert enrichment, correlation, and investigation workflows.
• Create and sustain API‑based integrations with security tools and AWS services.
• Support and enhance SIEM platforms for data ingestion, alerting, and investigation.
• Participate in detection engineering, including log parsing and detection logic.
• Assist in incident response activities from triage to post‑incident analysis.
• Take part in SOC on‑call rotation, responding to alerts and incidents as required.
• Collaborate with analysts to debug, troubleshoot, and optimise existing automation and CI/CD pipelines.

Required profile

• Hands‑on experience working in or closely with a Security Operations Center.
• Strong programming background with production‑quality code.
• Practical experience with AWS environments and cloud services.
• Familiarity with Linux fundamentals and containerised applications.

Required skills

• Python (preferred), Golang, Java
• RESTful API development and integration
• Git version control and collaborative workflows
• AWS services: IAM, EC2, S3, Lambda, CloudWatch
• Docker, CI/CD pipelines, containerisation
• SIEM platforms and EDR solutions
• Linux operating system

What we offer

• Opportunity to shape the future of blockchain security.
• Collaboration with world‑class talent in a flat, global organisation.
• Autonomous, fast‑paced projects with significant impact.