SOC Security Development Engineer developing security automation and SOC tooling for Binance. Join the Security Operations team focusing on engineering integration and incident response.
Responsibilities
Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
Build and maintain API-based integrations with security tools, AWS services, and internal systems
Support and enhance SIEM platforms for ingestion, alerting, and investigation
Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required
Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.
Requirements
Programming & Engineering Skills: Strong hands-on programming experience in one or more languages, such as: Python (preferred), Golang, Java.
Experience writing production-quality code, not just ad-hoc scripts, solid experience with RESTful APIs, including authentication, pagination, rate limiting, and error handling, familiarity with modern IDEs (VS Code, IntelliJ, PyCharm) and debugging techniques
Experience with Git-based version control and collaborative development workflows, Cloud, CI/CD & Containerization, practical experience working with AWS environments, including common services such as IAM, EC2, S3, Lambda, and CloudWatch, experience building, deploying, and maintaining Docker-based applications
Security & SOC Knowledge: Hands-on experience working in or closely with a Security Operations Center (SOC), like experience using SIEM platforms and familiarity with EDR solutions, understanding of common security telemetry sources
Platform & System Skills, experience developing or extending security platforms or internal security tools, solid Linux fundamentals
Benefits
Competitive salary and company benefits
Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Técnico em Segurança do Trabalho realizando visitas técnicas e treinamentos para elaboração do PGR e NR's. Atuando na área de segurança do trabalho na empresa Perfil Medicina.
Security Sergeant at Busch Gardens ensuring safety for guests and employees. Leading the security team in a fast - paced amusement park environment with a focus on guest service and safety.
Identity & Access Management Engineer at Farfetch, enhancing security operations in luxury e - commerce. Collaborating with engineers and stakeholders for scalable IAM solutions.
Cybersecurity & Information Technology Faculty position at Austin Community College. Instructing students on cybersecurity principles and practices in a multicultural setting.
Technical Engineer providing cybersecurity expertise and collaborating with sales teams for Power Grid Cybersecurity solutions. Supporting customers in the transition to secure digital power grids.
Associate Cybersecurity Consultant at Datacom working in Wellington or Auckland, delivering managed security services and advising clients on cybersecurity strategy.
Information Security Engineer improving cloud security and conducting risk assessments at fintech company. Collaborating with teams to ensure compliance and integrate security measures across the organization.
Security Guard ensuring safety of residential and commercial properties while performing routine patrols. Responsibilities include access verification, surveillance monitoring, and incident reporting.
Principal Security Engineer managing enterprise security SIEM and data ingestion stack. Leading a team to innovate and optimize cybersecurity solutions while ensuring compliance.