SOC Engineer (Incident Response)

About the Company

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries and offer trading, finance, education, research, payments, institutional services and Web3 features.

Responsibilities

• Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.
• Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).
• Configure DLP policies to prevent data exfiltration while minimizing false positives.
• Monitor, analyze, and tune alerts and incidents for continuous improvement.
• Lead investigations of DLP incidents and insider threats; conduct threat hunting and forensic analysis of data exfiltration attempts.
• Integrate DLP monitoring into SOC workflows and incident response playbooks.
• Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).
• Develop automation scripts, APIs, regexes and integrations to enhance detection and response.
• Explore AI/LLM-driven methods for anomaly detection and response efficiency.
• Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA) and support audits and regulatory reviews.
• Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.

Qualifications

• 4+ years in a SOC or security operations role with incident response focus.
• Proven experience with DLP design, deployment, and monitoring.
• Strong programming skills (macOS Swift, Unix socket programming, scripting).
• Hands-on threat hunting, forensic analysis, and APT detection experience.
• Familiarity with SIEM, EDR, and cloud security architectures.
• Knowledge of encryption, tokenization, and data classification methods.

Nice-to-have

• Experience working in fintech, crypto, or other high-security environments.

Benefits

• Competitive salary and company benefits.
• Opportunities for career growth and continuous learning.
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team).

Additional Information

Binance is committed to being an equal opportunity employer.