SOC Engineer – Incident Response

This is a fully remote position, open to applicants in Singapore.

📋 Description

• Design, implement, and enhance DLP solutions across network, endpoint, and cloud environments.

• Develop and improve data classification frameworks for sensitive assets (wallets, trading algorithms, customer PII).

• Set up DLP policies to safeguard against data exfiltration while reducing false positive occurrences.

• Monitor, analyze, and adjust alerts and incidents for ongoing improvement.

• Lead investigations into DLP incidents and insider threats.

• Perform threat hunting and forensic analysis regarding data exfiltration attempts.

• Integrate DLP monitoring within broader SOC workflows and incident response protocols.

• Create custom DLP tools and integrations (e.g., macOS Swift endpoint protection, Unix socket monitoring).

• Develop automation scripts, APIs, regex patterns, and integrations to enhance detection and response capabilities.

• Investigate AI/LLM-driven approaches for anomaly detection and improving response efficiency.

• Ensure that controls comply with crypto and financial regulations (AML, KYC, GDPR, CCPA).

• Assist with audits and regulatory reviews pertaining to data protection.

• Evaluate and mitigate data loss risks across trading platforms, onboarding systems, and blockchain infrastructure.

⛳️ Requirements

• A minimum of 4 years in a SOC or security operations position with a focus on incident response.

• Demonstrated experience in DLP design, implementation, and monitoring.

• Proficient programming skills (macOS Swift, Unix socket programming, scripting).

• Direct experience in threat hunting, forensic analysis, and APT detection.

• Familiarity with SIEM, EDR, and cloud security architectures.

• Understanding of encryption, tokenization, and data classification techniques.

🏝️ Benefits

• Competitive salary and company benefits.

• Work-from-home arrangement (the specifics may vary depending on the business team's work nature).