Design, deploy, and tune DLP across network, endpoint, and cloud; lead incident response, threat hunting, and forensics; build custom DLP tools and automations; integrate detections into SOC workflows and ensure regulatory compliance.
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
We’re looking for a security engineer with hands-on experience in Data Loss Prevention (DLP) and incident response, ideally within fintech, crypto, or high-security environments. The role goes beyond using commercial tools you’ll also design and build custom solutions, leverage automation, and adapt to emerging threats, including those driven by recent LLM/AI advancements.
Responsibilities
- Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
- Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
- Build and maintain API-based integrations with security tools, AWS services, and internal systems
- Support and enhance SIEM platforms for ingestion, alerting, and investigation
- Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
- Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis
- Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required
- Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.
Requirements
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Nice-to-have
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Why Binance
• Shape the future with the world’s leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
Similar Jobs
HR Tech • Information Technology • Professional Services • Consulting
Contract Math Expert to produce high-quality answers and "golden responses" for undergraduate and graduate mathematics prompts. Responsibilities include analysing complex problems, writing clear structured explanations, reviewing and refining model answers, collaborating with remote experts, and meeting format, quality, and timeliness requirements. Flexible 15–40 hour weekly commitment for a 3–6 month contract.
Artificial Intelligence • Marketing Tech • Sales • Software
Own the cryptographic core: select and evolve MPC/TSS schemes, author protocol reviews, implement and review Rust/Go production crypto, lead audit responses, prepare incident fixes, publish and represent externally, and teach/mentor engineers while scaling the crypto function.
Top Skills:
Bls ThresholdCggmp21Dkls23FrostGg18Gg20GoLattice-Based ThresholdMpcMulti-Party-EcdsaRaccoonRustSparkleTss
Artificial Intelligence • Marketing Tech • Sales • Software
Lead and scale the engineering organization for a regulated digital-asset custody platform. Own hiring, org design, engineering operations (on-call, incidents, release hygiene), delivery against roadmaps, audit and regulator readiness (SOC 2, SAMA, ISO 27001), and cross-functional alignment. Amplify an existing small, specialized team to meet regulatory and institutional requirements while preserving culture and retention.
Top Skills:
Aurora PostgresAWSBitcoinClickhouseEthereumGithub ActionsGoHsmKubernetesMpc/TssRustSolanaTemporalTerraformThreshold Signing ProtocolsTypescript
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
