SOC Engineer (Incident Response)
binance
Security Engineer
Binance is a leading global blockchain ecosystem behind the world's largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
We're looking for a security engineer with hands-on experience in Data Loss Prevention (DLP) and incident response, ideally within fintech, crypto, or high-security environments. The role goes beyond using commercial tools you'll also design and build custom solutions, leverage automation, and adapt to emerging threats, including those driven by recent LLM/AI advancements.
Responsibilities
- Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
- Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
- Build and maintain API-based integrations with security tools, AWS services, and internal systems
- Support and enhance SIEM platforms for ingestion, alerting, and investigation
- Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
- Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
- Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required
- Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.
Requirements
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Why Binance
- Shape the future with the world's leading blockchain ecosystem
- Collaborate with world-class talent in a user-centric global organization with a flat structure
- Tackle unique, fast-paced projects with autonomy in an innovative environment
- Thrive in a results-driven workplace with opportunities for career growth and continuous learning
- Competitive salary and company benefits
- Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the SOC Engineer (Incident Response) in United States vacancy
$96k - $124k
The Regional Security Operations Center (SOC)/Incident response Engineer is responsible for implementing and maintaining security controls and systems in the Americas region. This position also works within the global SOC to detect, analyze, respond to, and recover from...SuggestedWork at office- TENEX.AI, based in Overland Park, Kansas, is seeking a skilled expert in Managed Detection and Response (MDR). The role involves leading complex incident responses, assessing telemetry quality, and supporting automation initiatives. A strong background in security operations...Suggested
$96k - $124k
...The Regional Security Operations Center (SOC)/Incident response Engineer is responsible for implementing and maintaining security controls and systems in the Americas region. This position also works within the global SOC to detect, analyze, respond to, and recover from...SuggestedFull time- ...Job Title: Senior SOC L3 Analyst / Incident Response Lead Location: San Jose, CA (4 days onsite, 1 day remote) About The AES Group: The AES Group is a premier technology and engineering consulting company that has been bringing businesses and talent together...SuggestedRemote work
The AES Group
San Jose, CA1 day ago $115k - $154k
...Center — an analyst who leads complex incident investigations, engineers and optimizes the CrowdStrike Falcon... ...investigation role that happens to sit in the SOC.Why This Role ExistsBiogen's threat... ...Falcon is our primary detection and response platform — we need an engineer who...SuggestedFull timeTemporary workLocal areaRemote work- ...Senior Security Operations Center (SOC) Analyst to lead detection, investigation, and response to cybersecurity threats within a large... ...will mentor junior analysts, drive incident playbooks, and collaborate with Infrastructure, Engineering, and IT teams to strengthen...
- ...player is seeking a skilled Security Operations Center (SOC) Analyst to join their dynamic team. This role requires... ..., and effective communication skills. You will be responsible for analyzing security incidents, creating automations for security operations tools, and...
$112.5k - $150k
Senior Security Operations & Incident Response Engineer Salary: $112,500-$150,000 The Engineer - Security Operations and Incident Response will... ...and 5+ years of relevant experience in incident response and SOC tooling. In-depth knowledge of SIEM/SOAR platforms and...- TENEX is seeking a SOC Engineer to own high-severity incidents, shape detection automation, and optimize telemetry coverage across endpoints, networks, identities, and cloud. You’ll collaborate with engineering teams and customers to ensure robust detection and rapid containment...
- ...Job Description Job Description The SOC / Incident Response Engineer supports enterprise security monitoring, incident response, and threat detection across a hybrid IT environment, including on-premises infrastructure and cloud services. This role provides...
$90k - $150k
LCH Lab. Corp. of America Holdings is seeking a Security Operations Center (SOC) Manager in Durham, NC. The successful candidate will lead a 24/7 security team, manage incident response, and drive operational excellence within the organization. The role requires a Bachelor...- Trace3 is seeking a SOC Analyst to monitor, detect, analyze, and respond to cybersecurity incidents in Fargo, North Dakota. The ideal candidate will have a Bachelor's... ...experience in a SOC or IT security operations role. Responsibilities include monitoring security alerts,...
- Lennar is seeking a Senior SOC Analyst in Miami, Florida, to lead incident response efforts, manage escalations, and work with security partners to detect and remediate threats effectively. The role requires 5-7 years of cybersecurity experience with expertise in incident...
- ...cybersecurity solutions provider is seeking a Remote SOC Analyst to join their team in Atlanta, Georgia.... ...and hold relevant security certifications. Responsibilities include investigating alerts, conducting incident response, and correlating data to identify threats...Remote job
$100k - $120k
...for a remote role focused on managing daily activities of the SOC. This position requires a Bachelor's degree and a minimum of 8 years of IT experience, including 4 years specifically in incident response. An active Secret clearance is also essential. The role involves...Remote workSkyePoint Decisions
New York, NY2 days ago- SOC Analyst: Threat Detection & Incident Response job at Nconsolidator. Annapolis, MD. Nconsolidator seeks a cybersecurity professional to analyze intrusion events, assess threats, and support client security operations. You will apply frameworks like MITRE ATT&CK and Cyber...
- ...Talent Central LLC in Houston, TX seeks a SOC Analyst with 3-5 years of hands-on... ...will monitor, investigate, and coordinate responses to cybersecurity events across enterprise... ...Microsoft security tools. The role emphasizes incident response, threat hunting, phishing investigation...
- ...Swift Software seeks a Lead SOC Analyst for our Cyber Fusion Centre to oversee threat hunting, support incident response, and provide strategic guidance to junior staff. You will lead a formal Threat Hunting program, participate in 24x7 SOC operations, and collaborate...
Swift Software
California, MO3 days ago - ...is seeking a Senior Security Operations Center (SOC) Analyst to lead investigations and mitigate security incidents. This role involves triaging alerts, performing... ...teams and aims to strengthen the organization’s response capabilities. #J-18808-Ljbffr Zelis Healthcare...
- ...do. At Cencora, we are united in our responsibility to create healthier futures, and every... ...!Job DetailsPosition Summary The Engineer II, Cyber Incident Response, is a mid-level technical role... ...within the Security Operations Center (SOC) responsible for detecting,...Full timeWork experience placementLocal area
- Trace3 is looking for a SOC Analyst located in Kansas City, KS. In this role, you will be responsible for monitoring, detecting, and responding to cybersecurity incidents. Key tasks include analyzing security events from various technologies, documenting incidents, and...
- AWS Incident Response (AIR) ensures the high availability of Amazon Web Services by making customer-impacting events shorter and less frequent... ...impact across regions and services.As a Systems Development Engineer on the AIR team, you will lead the response to critical...
- Lennar USA is seeking a Senior SOC Analyst to join its cybersecurity team in Miami, Florida. This critical role involves leading advanced incident response efforts, managing escalations, and working with partners to detect and remediate security threats effectively. The...
$55.7k - $82.1k
...The Cybersecurity Incident Response Engineer, Jr. monitors enterprise security tools and logs to detect, analyze, and triage potential cybersecurity... ...scanners, and interpret how their alerts surface within SOC tools. Follow established SOC standard operating procedures...Contract workWork at officeShift workASM Research, An Accenture Federal Services Company
Baton Rouge, LA3 days ago$66.9k - $82.1k
...Position Overview The Cybersecurity Incident Response Engineer, Mid supports the detection, containment, and recovery of cybersecurity incidents... ...initiatives, improving detection logic, and strengthening SOC capabilities to protect the organization against evolving...Contract workWork experience placementWork at officeASM Research, An Accenture Federal Services Company
Richmond, VA1 day ago- KellyMitchell Group seeks an Incident Response Team Lead in Arlington Heights to monitor, respond, and mitigate security incidents in a critical... ..., while coordinating with a skilled team. With 3+ years in SOC or incident response and a degree in Computer Science or Cybersecurity...
- Zipline is hiring a Network Operations Field Support Engineer to support drone delivery and ground infrastructure across multiple sites. You will own monitoring, incident response, and hands-on cabling and hardware tasks to keep networked systems online and ensure timely...Work at office
$160.3k - $240.5k
...un rôle pratique, pour agir à titre de responsable technique de l’équipe pendant les heures... ...des enquêtes complexes et la gestion d’incidents majeurs, offrirez des conseils... ...is seeking a senior, hands-on security engineer to serve as the team’s technical lead during...Full timeWork at officeRemote workWorldwide- Total Quality Logistics in Cincinnati is seeking an NOC Specialist to monitor critical services, coordinate incident response, and drive rapid service restoration. You will develop response plans, analyze operational data, and contribute to proactive improvements in a large...Night shift
$80.2k - $111.3k
...Position Overview The Cybersecurity Incident Response Engineer, Senior leads complex incident response efforts for enterprise networks and mission... ...develops and deploys scalable countermeasures, enhances SOC tooling and integrations, and implements advanced detection...Contract workWork experience placementWork at officeASM Research, An Accenture Federal Services Company
Indianapolis, IN4 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to SOC Engineer (Incident Response). Be the first to apply!
