SOC Security Engineer

Binance; Asia; Presencial; PEN 272.201 - 340.252; Jornada completa

Descripción de la vacante

Binance is seeking a SOC Security Development Engineer in Lima, Peru, to develop security platforms and integrate tools for incident response. The candidate must possess strong programming skills, particularly in Python, and have experience with SOC operations and security platforms.

This role emphasizes building automation and improving security workflows through engineering solutions. Join us in advancing the freedom of money and enhancing financial access worldwide.

Formación

• Strong hands-on programming skills in Python, Golang, or Java.
• Experience writing production-quality code, using RESTful APIs.
• Familiarity with Docker for application deployment.

Responsabilidades

• Design and maintain security automation and SOC tooling.
• Develop scripts and pipelines for security workflows.
• Participate in security incident response as needed.

Conocimientos

Programming experience in Python

Experience with RESTful APIs

Familiarity with Git-based version control

Knowledge of AWS services

Experience in Security Operations Centers (SOC)

Herramientas

SIEM platforms

Docker

Cloud services

Descripción del empleo

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

We are looking for a SOC Security Development Engineer to join our Security Operations team.

This role focuses on security platform development, automation, and engineering integration with internal tools while also actively participating in incident response and SOC on-call operations.

The ideal candidate has strong hands‑on programming skills, solid understanding of SOC workflows, and practical experience integrating and extending security platforms such as SIEM, EDR, and cloud-based security services through APIs and custom development.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms
• Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows
• Build and maintain API-based integrations with security tools, AWS services, and internal systems
• Support and enhance SIEM platforms for ingestion, alerting, and investigation
• Participate in security detection engineering, including log parsing, data normalization, and detection logic implementation
• Assist in security incident response, including triage, investigation, containment, eradication, and post‑incident analysis
• Take part in SOC on‑call rotation / shift duty, responding to security alerts and incidents as required
• Work closely with SOC analysts to translate operational needs into scalable engineering solutions, debug, troubleshoot, and optimize existing security automation, CI/CD pipelines, and platform components etc.

Qualifications

• Programming & Engineering Skills: Strong hands‑on programming experience in one or more languages, such as: Python (preferred), Golang, Java.
• Experience writing production-quality code, not just ad‑hoc scripts, solid experience with RESTful APIs, including authentication, pagination, rate limiting, and error handling, familiarity with modern IDEs (VS Code, IntelliJ, PyCharm) and debugging techniques.
• Experience with Git‑based version control and collaborative development workflows, Cloud, CI/CD & Containerization, practical experience working with AWS environments, including common services such as IAM, EC2, S3, Lambda, and CloudWatch, experience building, deploying, and maintaining Docker‑based applications.
• Security & SOC Knowledge: Hands‑on experience working in or closely with a Security Operations Center (SOC), like experience using SIEM platforms and familiarity with EDR solutions, understanding of common security telemetry sources.
• Platform & System Skills, experience developing or extending security platforms or internal security tools, solid Linux fundamentals.

Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.