Remote SOC Automation Engineer

Binance; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Work-from-home arrangement

Job summary

Binance is seeking a Security Automation Engineer to design, develop, and maintain SOC tooling and security automation across SIEM, EDR, cloud services, and internal platforms. You will help automate alerting, enrichment, correlation, and investigation workflows.

You will work with AWS environments, RESTful APIs, and containerized deployments to strengthen threat detection and incident response capabilities. This role offers a remote work arrangement with competitive benefits.

Qualifications

• Proficient in one or more programming languages: Python, Golang or Java.
• Experience building production-quality code with RESTful APIs, authentication, pagination, and error handling.
• Experience with Git-based workflows, CI/CD, containerization, and AWS services (IAM, EC2, S3, Lambda, CloudWatch).
• Hands-on SOC experience with SIEM/EDR and security telemetry sources.
• Strong Linux fundamentals and security platform development/extension experience.

Responsibilities

• Design, develop, and maintain security automation and SOC tooling with SIEM, EDR, cloud services, and internal platforms.
• Develop services and pipelines to automate alert enrichment, correlation, response, and investigation workflows.
• Build and maintain API integrations with security tools, AWS services, and internal systems.
• Support and enhance SIEM platforms for ingestion, alerting, and investigation.
• Contribute to detection engineering: log parsing, data normalization, and detection logic.
• Assist in incident response: triage, containment, eradication, and post-incident analysis.
• Participate in SOC on-call rotation and respond to security alerts as required.

Skills

Python

Golang

Java

RESTful APIs

AWS

CI/CD

Docker

Git

Linux

SOC

Tools

VS Code

IntelliJ

PyCharm

Docker

Git

Job description

Binance is seeking a Security Automation Engineer to design, develop, and maintain SOC tooling and security automation across SIEM, EDR, cloud services, and internal platforms. You will help automate alerting, enrichment, correlation, and investigation workflows.

You will work with AWS environments, RESTful APIs, and containerized deployments to strengthen threat detection and incident response capabilities. This role offers a remote work arrangement with competitive benefits.