Design, deploy, and tune DLP across network, endpoint, and cloud; lead incident response, threat hunting, and forensics; build custom DLP tools and automations; integrate detections into SOC workflows and ensure regulatory compliance.
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
Responsibilities
- Design, develop, and maintain SOC security platforms and tooling, with a primary focus on SIEM, SOAR, and security automation.
- Develop Python-based services, scripts, automation workflows, and security integrations with SIEM, EDR, AWS, and internal security platforms.
- Build and maintain AWS-based security services and integrations, including EC2, S3, Lambda, IAM, and CloudWatch.
- Support SIEM operations and detection engineering, including log ingestion, parsing, normalization, correlation, and detection rule development.
- Develop detection use cases and common security threat models, based on attack scenarios and real-world security incidents.
- Participate in SOC on-call rotation and incident response, including alert triage, investigation, containment, and post-incident analysis.
- Work with SOC analysts and security teams to improve security automation, detection coverage, and platform capabilities.
Requirements
- Hands-on Python development experience is required. Experience with Golang or Java is a plus.
- Hands-on experience with AWS, particularly EC2, S3, Lambda, IAM, and CloudWatch.
- Experience developing production-quality services, automation, APIs, or internal security tools.
- Practical experience using SIEM platforms for security monitoring, log analysis, and alert investigation.
- Good understanding of SOC operations and Incident Response (IR), including alert triage and security incident investigation.
- Understanding of common security threats and experience developing security detections / threat models / SIEM use cases.
- Familiarity with EDR, security telemetry, REST APIs, Git, Docker, and Linux.
- Strong problem-solving, troubleshooting, and communication skills.
Nice-to-have
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Why Binance
• Shape the future with the world’s leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
Similar Jobs
Artificial Intelligence • Marketing Tech • Sales • Software
Own the cryptographic core: select and evolve MPC/TSS schemes, author protocol reviews, implement and review Rust/Go production crypto, lead audit responses, prepare incident fixes, publish and represent externally, and teach/mentor engineers while scaling the crypto function.
Top Skills:
Bls ThresholdCggmp21Dkls23FrostGg18Gg20GoLattice-Based ThresholdMpcMulti-Party-EcdsaRaccoonRustSparkleTss
News + Entertainment
Intern develops and produces short- and long-form digital content for TikTok, Instagram, YouTube, and other platforms. Responsibilities include creating ideas, scripts, storyboards, coordinating shoots with artists, collaborating with creative teams, supporting music releases and promotions, monitoring performance, and identifying trends. The role requires interest in music, entertainment, and social media, along with storytelling, communication, organization, and basic video editing skills.
Top Skills:
InstagramTiktokVideo EditingYoutube
Artificial Intelligence • Fintech • Software • Automation
Owns post-onboarding relationships for 200–250 Growth-tier SaaS accounts. Responsibilities include monitoring account health, improving retention and renewals, validating data quality, managing escalations, coordinating with Sales, Finance, Product, and Engineering, maintaining customer records, and developing scalable digital customer success playbooks, health scoring, automated outreach, and self-service content.
Top Skills:
Admin PanelChurnzeroDevrevGainsightHubspotJIRA
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
