SOC Engineer (Incident Response & Python Automation)

• Experience developing production-quality services, automation, APIs, or internal security tools.

• Practical experience using SIEM platforms for security monitoring, log analysis, and alert investigation.

• Good understanding of SOC operations and Incident Response (IR), including alert triage and security incident investigation.

• Understanding of common security threats and experience developing security detections / threat models / SIEM use cases.

• Familiarity with EDR, security telemetry, REST APIs, Git, Docker, and Linux.

• Strong problem-solving, troubleshooting, and communication skills.

Nice-to-have

• 4+ years in a SOC or security operations role with incident response focus.

• Proven experience with DLP design, deployment, and monitoring.

• Strong programming skills (macOS Swift, Unix socket programming, scripting).

• Hands-on threat hunting, forensic analysis, and APT detection experience.

• Familiarity with SIEM, EDR, and cloud security architectures.

• Knowledge of encryption, tokenization, and data classification methods.

Why Binance

• Shape the future with the world’s leading blockchain ecosystem

• Collaborate with world-class talent in a user-centric global organization with a flat structure

• Tackle unique, fast-paced projects with autonomy in an innovative environment

• Thrive in a results-driven workplace with opportunities for career growth and continuous learning

• Competitive salary and company benefits

• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.

By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice .

• Security
• Security & IT Helpdesk

Source: Binance careers page