SOC Engineer (Incident Response & Python Automation) at Binance

Department: Security & IT Helpdesk

Setup: Remote
Location: Florida
Type: Full-time
Level: mid
Posted: Jun 1, 2026

Description

Binance is hiring a SOC Security Engineer to design, develop, and maintain security platforms and automation focused on SIEM, SOAR, and security operations. The role involves Python and AWS development, SIEM detection engineering, incident response, alert triage, investigation, and collaboration with security teams. Candidates need hands-on Python, AWS, SIEM, and security operations experience; the position offers a work-from-home arrangement that may vary by business team.

Required Skills

Python
AWS
SIEM
Incident Response
EDR
Docker
Linux

Additional Information

Required Previous Experiences: Hands-on Python development experience
Hands-on AWS experience
Experience developing production-quality services, automation, APIs, or internal security tools
Practical SIEM experience for security monitoring, log analysis, and alert investigation
SOC operations and incident response experience
Experience developing security detections, threat models, and SIEM use cases
Preferred Qualifications: Experience with Golang or Java
4+ years in a SOC or security operations role with incident response focus
Experience with DLP design, deployment, and monitoring
Strong programming skills in macOS Swift, Unix socket programming, and scripting
Hands-on threat hunting, forensic analysis, and APT detection experience
Familiarity with SIEM, EDR, and cloud security architectures
Knowledge of encryption, tokenization, and data classification methods
Translation Company Name: Binance