Security Operation Engineer (SOC)

Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by over 230 million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.

Responsibilities

• Handle 7 × 24 hour security incident response.
• Formulation and implementation of security response plan and security assurance for the whole life cycle of the company system.
• Lead the team to enhance the ability of security situation perception.

Requirements

• 5 years+ security emergency response experience.
• Experienced in intrusion detection, event tracing and log analysis. Familiar with common attack and protection methods, deep understanding of the principles, utilization methods and solutions of common security vulnerabilities.
• Experienced in malicious feature extraction ability, familiar with Yara rules, have TTP analysis.
• Strong security techniques research ability to lead teams quickly iterate to new technology means or solutions.
• Familiar with EDR, HIDS solutions.
• Big data development foundation, familiar with Hadoop , Splunk, Elasticsearch, etc.
• Deep understanding of security operations: border defense, internal threats, risk management, etc.
• Team management experience.
• High stress handling ability, adapt to high-intensity work, have good communication ability.