Design, deploy, and tune DLP across network, endpoint, and cloud; lead incident response, threat hunting, and forensics; build custom DLP tools and automations; integrate detections into SOC workflows and ensure regulatory compliance.
Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world.
We’re looking for a security engineer with hands-on experience in Data Loss Prevention (DLP) and incident response, ideally within fintech, crypto, or high-security environments. The role goes beyond using commercial tools you’ll also design and build custom solutions, leverage automation, and adapt to emerging threats, including those driven by recent LLM/AI advancements.
Responsibilities
- Design, deploy, and optimize DLP solutions across network, endpoint, and cloud.
- Build and refine data classification schemes for sensitive assets (wallets, trading algorithms, customer PII).
- Configure DLP policies to prevent data exfiltration while minimizing false positives.
- Monitor, analyze, and tune alerts and incidents for continuous improvement.
- Lead investigations of DLP incidents and insider threats,
- Conduct threat hunting and forensic analysis of data exfiltration attempts.
- Integrate DLP monitoring into broader SOC workflows and incident response playbooks.
- Build custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).
- Develop automation scripts, APIs, regexes and integrations to enhance detection and response.
- Explore AI/LLM-driven methods for anomaly detection and response efficiency.
- Ensure controls align with crypto and financial regulations (AML, KYC, GDPR, CCPA).
- Support audits and regulatory reviews related to data protection.
- Assess and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.
Requirements
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Nice-to-have
- 4+ years in a SOC or security operations role with incident response focus.
- Proven experience with DLP design, deployment, and monitoring.
- Strong programming skills (macOS Swift, Unix socket programming, scripting).
- Hands-on threat hunting, forensic analysis, and APT detection experience.
- Familiarity with SIEM, EDR, and cloud security architectures.
- Knowledge of encryption, tokenization, and data classification methods.
Why Binance
• Shape the future with the world’s leading blockchain ecosystem
• Collaborate with world-class talent in a user-centric global organization with a flat structure
• Tackle unique, fast-paced projects with autonomy in an innovative environment
• Thrive in a results-driven workplace with opportunities for career growth and continuous learning
• Competitive salary and company benefits
• Work-from-home arrangement (the arrangement may vary depending on the work nature of the business team)
Binance is committed to being an equal opportunity employer. We believe that having a diverse workforce is fundamental to our success.
By submitting a job application, you confirm that you have read and agree to our Candidate Privacy Notice.
Similar Jobs
4 Hours Ago
Fintech • Information Technology • Software • Financial Services
Lead and grow a regional institutional sales team for DBS Digital Exchange, driving revenue, onboarding institutional clients, managing liquidity and P&L, cross-selling digital asset products (trading, custody, derivatives, security tokens), providing market intelligence, and building a sustainable regional institutional client base.
Fintech • Information Technology • Software • Financial Services
Design, build, and maintain real-time, secure distributed systems and observability UIs/APIs. Implement CI/CD, containerized deployments (Docker/Kubernetes/OpenShift), integrate observability stack (Elasticsearch/Logstash/Grafana), and apply secure coding and API security standards to ensure reliability, performance, and incident automation. Collaborate in Agile teams and explore AI to improve resiliency.
Top Skills:
Agentic AiCi/CdDockerElasticsearchGrafanaJava Spring BootKafkaKubernetesLogstashMariadbNode.jsOauth2OpenshiftReactSecrets Management
Fintech • Information Technology • Software • Financial Services
Lead customer experience and change initiatives for the Customer Centre: develop customer-obsession strategies, analyze data, facilitate design-thinking workshops, support campaigns and business reviews, drive process improvement, enable Gen AI-led quality improvements, and manage change to ensure KPI targets and successful adoption of new ways of working.
Top Skills:
Gen Ai
What you need to know about the Delhi Tech Scene
Delhi, India's capital city, is a place where tradition and progress co-exist. While Old Delhi is known for its rich history and bustling markets, New Delhi is defined by its modern architecture. It's clear the region places a strong emphasis on preserving its cultural heritage while embracing technological advancements, particularly in artificial intelligence, which plays a central role in shaping the city's tech landscape, fueled by investments in research and development.
