Security Engineer (Data Centers)

Galaxy; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Company health benefits

401(k) matching 3%

Counseling services

Free snacks in-office

Employee Resource Groups

Job summary

Galaxy Digital Inc. is seeking an experienced Security Engineer to operate and optimize a Security Operations Center for a data center environment.

You will monitor security events, investigate incidents, and automate tasks with Python, PowerShell, and Bash across cloud and on-prem setups. The role requires hands-on SOC experience, scripting skills, and familiarity with SIEMs, XDR, DLP, and UBA tools, plus strong collaboration with IT/DevOps teams.

Qualifications

• Experience running a SOC or SOC operations.
• Strong scripting skills in Python, PowerShell, Bash, or similar languages with automation experience.
• Experience with on-prem firewall configuration (Palo).
• Experience with VMware, AWS, Azure in cloud/on-prem environments.
• Experience with security log/analysis tools such as Splunk, ELK, SumoLogic, or similar SIEM platforms.
• Experience with XDR, DLP, and UBA tools (Cortex, CrowdStrike, etc.).
• Good understanding of network protocols and system security.
• Windows and Linux experience.
• Experience with CI/CD and DevOps practices.
• Strong problem-solving and analytical skills.
• Familiarity with Git and version control.
• Excellent communication and collaboration skills.

Responsibilities

• SOC Operations & Management: oversee day-to-day SOC operations including monitoring, analysis, and incident response.
• Threat Detection & Response: identify, investigate, and respond to cybersecurity threats using SIEM and related tools.
• Incident Management: lead or support root-cause analysis, mitigation, and post-incident reporting.
• Custom Scripting & Automation: develop and maintain scripts (Python, PowerShell, Bash) to automate security tasks.
• Security Monitoring & Analysis: analyze logs and network traffic to detect anomalies.
• Tool Implementation & Optimization: support deployment and optimization of SIEM, SOAR, IDS/IPS, EDR tools.
• Collaboration with Teams: work with IT, DevOps, and security teams to implement protective measures.
• Security Policies & Procedures: help develop and maintain security policies and best practices.
• Training & Mentoring: mentor junior team members and improve SOC processes.

Skills

Python scripting

PowerShell

Bash

On-prem firewall configuration

VMware

AWS

Azure

Splunk

ELK

Sumo Logic

XDR

DLP

UBA tools

Cortex

CrowdStrike

Network protocols

Windows

Linux

CI/CD

DevOps

Git

Tools

Palo Alto firewall

SIEM platforms

SOAR

EDR

Job description

Galaxy Digital Inc. (Nasdaq: GLXY) is a global leader in digital assets and data center infrastructure, growing the economy that runs on code. Galaxy delivers the onchain infrastructure that connects institutions to digital assets, including trading, advisory, asset management, staking, self-custody, and tokenization. Galaxy also develops and operates data center infrastructure to power AI and HPC workloads. Anchored by its Helios campus in Texas, Galaxy is building a multi-gigawatt pipeline of more than 5.7 GW of potential capacity, positioning it among the largest and fastest-growing data center developers in North America.

The Company is headquartered in New York City, with offices across North America, Europe, the Middle East, and Asia.

Additional information about Galaxy's businesses and products is available on www.galaxy.com .

What We Value:

• Be Selective To Be Effective.
• Be Highly Aligned, Loosely Coupled.
• Disagree Transparently.
• Build Dream Teams.

Who You Are:

A collaborative and experienced Security Engineer with hands-on experience running a Security Operations Center (SOC) for a DataCenter. You're comfortable working with existing tooling to analyze and monitor day-to-day operations, as well as create your own scripts or tools in both cloud and on-prem. You work well with others to solve complex problems, contribute to system design, and ensure smooth, reliable operations. You're proactive in learning and applying new technologies to enhance performance and efficiency.

Responsibilities:

• SOC Operations & Management: Oversee and manage the day-to-day operations of the Security Operations Center, including monitoring, analyzing, and responding to security alerts and incidents.
• Threat Detection & Response: Identify, investigate, and respond to cybersecurity threats using advanced monitoring tools, SIEM platforms, and other security technologies.
• Incident Management: Lead or support incident response activities, including root cause analysis, mitigation, and post-incident reporting.
• Custom Scripting & Automation: Develop and maintain custom scripts (e.g., in Python, PowerShell, Bash) to automate security processes, improve threat detection, and streamline incident response workflows.
• Security Monitoring & Analysis: Analyze logs, network traffic, and system behavior to detect potential security breaches or anomalies.
• Tool Implementation & Optimization: Support the deployment, configuration, and optimization of security tools such as SIEM, SOAR, IDS/IPS, firewalls, and endpoint detection and response (EDR) solutions.
• Collaboration with Teams: Work closely with IT, DevOps, and other security teams to ensure consistent security practices and to implement protective measures.
• Security Policies & Procedures: Participate in the development and maintenance of security policies, procedures, and best practices.
• Training & Mentoring: Provide guidance and mentorship to junior team members and contribute to the continuous improvement of the SOC team.

Requirements:

• Experience working in or running a SOC
• Strong scripting skillsin Python, PowerShell, Bash, or similar languages, with experience in automating security tasks.
• On-prem Firewall Rule and Configuration (Palo)
• Experience with various on-prem and Cloud environments (VMware, AWS, Azure)
• Experience with security log/analysis toolssuch as Splunk, ELK, SumoLogic, or similar SIEM platforms.
• Experience with XDR, DLP, and UBA tools and concepts (Cortex, CrowdStrike, etc.)
• Good understanding of network protocols and system security
• Windows and Linux experience
• Experience with CI/CD and DevOps practices
• Strong problem-solving and analytical skills
• Familiarity with version control (Git)
• Excellent communication and collaboration skills

What We Offer:

• Competitive base salary and discretionary bonus
• Company paid sick leave
• Company-paid health and protective benefits for employees, partners, and other dependents
• 3% 401(k) company contribution
• Free virtual coaching and counseling sessions through Ginger
• Free daily snacks in-office
• Smart, entrepreneurial, and fun colleagues
• Employee Resource Groups

*Benefits may vary depending on location.

Galaxy respects diversity and seeks to provide equal employment opportunities to all employees and job applicants for employment without regard to actual or perceived age, race, color, creed, religion, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression (including transgender status), sexual orientation, marital or partnership or caregiver status, ancestry, national origin, citizenship status, disability, military or veteran status, protected medical condition as defined by applicable state or local law, genetic information or predisposing genetic characteristic, or other characteristic protected by applicable federal, state, or local laws and ordinances.

We will endeavor to make a reasonable accommodation to the known limitations of a qualified applicant with a disability unless the accommodation would impose an undue hardship on the operation of our business. If you believe you require such assistance to complete the application process or to participate in an interview, please contact [e-mail].