SOC Security Engineer: Automation & Cloud Security

Binance; Hong Kong; On-site; HKD 800,000 - 1,000,000; Full time

Benefits offered by this job

Work-from-home arrangement

Competitive salary

Learning & growth

Job summary

Binance is seeking a Security Automation Engineer to design, develop, and maintain security automation and SOC tooling, with integrations to SIEM, EDR, cloud services, and internal security platforms. You will build services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows.

Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug and optimize CI/CD pipelines, support incident response, and

Qualifications

• Strong hands-on programming in Python (preferred) or Golang/Java.
• Experience delivering production-quality code with RESTful APIs, authentication, pagination, rate limiting, and error handling.
• Experience with Git-based version control and collaborative development workflows; cloud, CI/CD and containerization.
• Hands-on with SIEM/EDR and security telemetry sources; Linux fundamentals are essential.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms.
• Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows.
• Build and maintain API-based integrations with security tools, AWS services, and internal systems.
• Support and enhance SIEM platforms for ingestion, alerting, and investigation.
• Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation.
• Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis.
• Take part in SOC on-call rotation / shift duty, responding to security alerts and incidents as required.

Skills

Python

Golang

Java

RESTful APIs

Git

CI/CD

Docker

Linux

SOC

Tools

AWS

IAM

EC2

S3

Lambda

CloudWatch

Docker

Job description

Binance is seeking a Security Automation Engineer to design, develop, and maintain security automation and SOC tooling, with integrations to SIEM, EDR, cloud services, and internal security platforms. You will build services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows.

Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug and optimize CI/CD pipelines, support incident response, and