SOC Security Engineer
Stockbit
Summary
We are looking for a SOC Security Engineer to help safeguard our systems and users by monitoring, detecting, and responding to security threats. In this role, you will be at the front line of defense—analyzing alerts, investigating incidents, and working closely with cross-functional teams to strengthen our overall security posture.
What You’ll Do
Security Monitoring: Monitor and analyze security alerts and logs across systems such as SIEM, cloud infrastructure, WAF, and application logs to detect suspicious activities
Incident Detection & Response: Investigate and triage alerts, identify potential threats, and coordinate incident response efforts to contain and mitigate risks
Threat Investigation: Analyze suspicious activities (e.g., abnormal login patterns, API abuse, account takeover attempts) and assess their impact
Threat Hunting: Proactively identify hidden threats and anomalies through log analysis and system telemetry
Security Tooling & Automation: Maintain and improve detection rules, alerts, and monitoring workflows to enhance visibility and response efficiency
Collaboration with Engineering: Partner with engineering, infrastructure, and application security teams to investigate incidents and implement preventive measures
Security Incident Documentation: Document incidents, response actions, and lessons learned to improve playbooks and processes
Security Improvements: Continuously enhance detection capabilities and contribute to strengthening the organization’s security posture
What We’re Looking For
Minimum 2 years of experience in Security Analyst / SOC / related roles
Hands-on experience with security tools such as SIEM, EDR, IDS/IPS, or WAF
Strong understanding of security fundamentals (network security, web security, authentication, etc.)
Experience in incident response and threat investigation, including handling true positive critical incidents
Ability to analyze system logs and identify suspicious patterns or anomalies
Familiarity with cloud environments (AWS/GCP) and modern web architectures
Strong analytical thinking and problem-solving skills
Bonus Points
Experience working in a SOC environment
Familiarity with threat intelligence and threat hunting practices
Experience with automation or scripting (Python, Bash, etc.)
Understanding of fintech-related security risks (e.g., account takeover, fraud detection, API abuse)