Remote SOC Engineer (Automation & IR)

Binance; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Work-from-home arrangement

Job summary

Binance is seeking a Security Engineer to design, build, and maintain security automation and SOC tooling. You will integrate SIEM/EDR with cloud services and internal platforms, automate alerting, enrichment, and investigation workflows, and support incident response.

The role requires hands-on development in Python/Go/Java, strong API and Linux skills, and experience with AWS, Docker, Git, and CI/CD. You will work with SOC analysts and participate in on‑call rotations.

Qualifications

• Proven ability to write production-grade code in one or more languages (Python/Go/Java).
• Experience with RESTful APIs, authentication, pagination, rate limiting, and error handling.
• Familiarity with Git-based workflows, CI/CD, containerization, and AWS services.
• Hands-on SOC/SEC operations experience and security telemetry understanding.
• Solid Linux fundamentals and platform development or extension experience.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling, including integrations with SIEM, EDR, cloud services, and internal security platforms.
• Develop services, scripts, and pipelines to automate alert enrichment, correlation, response, and investigation workflows.
• Build and maintain API-based integrations with security tools, AWS services, and internal systems.
• Support and enhance SIEM platforms for ingestion, alerting, and investigation.
• Participate in security detection engineering, including log parsing and detection logic implementation.
• Assist in security incident response, including triage, investigation, containment, eradication, and post-incident analysis.
• Take part in SOC on‑call rotation / shift duty, responding to security alerts and incidents as required.

Skills

Python/Golang/Java

Production-grade code

RESTful APIs

Git workflows

AWS cloud

Docker

CI/CD pipelines

Linux fundamentals

Security operations

Tools

AWS

Docker

Git

CI/CD

Job description

Binance is seeking a Security Engineer to design, build, and maintain security automation and SOC tooling. You will integrate SIEM/EDR with cloud services and internal platforms, automate alerting, enrichment, and investigation workflows, and support incident response.

The role requires hands-on development in Python/Go/Java, strong API and Linux skills, and experience with AWS, Docker, Git, and CI/CD. You will work with SOC analysts and participate in on‑call rotations.