SOC Incident Response Analyst - Build Playbooks, Detections

BTSE; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Team-building programs

Company events

Job summary

BTSE Group is a global fintech and blockchain technology leader, delivering white-label exchange, payment solutions, custody, wallets, and blockchain integration. Serving over 100 corporate clients worldwide, the company fosters a lean, high-ownership security culture.

The SOC role at BTSE involves triaging alerts across SIEM/EDR/WAF/email/cloud with an MSSP, owning incidents end-to-end, and turning insights into playbooks and detection updates.

Qualifications

• 3-4 years SOC experience with SIEM rule development and alert triage.
• Python scripting skills and comfort reading raw logs.
• Knowledge of MITRE ATT&CK, incident response frameworks, and cloud security.

Responsibilities

• Triage alerts across SIEM, EDR, WAF, email, and cloud, coordinating with our MSSP.
• Own incidents end-to-end and turn them into playbooks and detection updates.
• Tune and validate SIEM rules (ES|QL/EQL/KQL) and support insider threat detection.

Skills

SIEM rule development

Alert triage

Python scripting

Logs parsing

MITRE ATT&CK knowledge

Incident response

Tools

ES/QL/EQL/KQL

Job description

BTSE Group is a global fintech and blockchain technology leader, delivering white-label exchange, payment solutions, custody, wallets, and blockchain integration. Serving over 100 corporate clients worldwide, the company fosters a lean, high-ownership security culture.

The SOC role at BTSE involves triaging alerts across SIEM/EDR/WAF/email/cloud with an MSSP, owning incidents end-to-end, and turning insights into playbooks and detection updates.