Security Operations Engineer

FalconX bridges the gap between traditional finance and cryptocurrency markets, providing institutional clients with comprehensive solutions for digital asset trading and management. The company operates as a critical infrastructure layer enabling seamless access to crypto liquidity and strategies at enterprise scale.

FalconX is a growing force in the institutional crypto space, combining operational excellence with deep financial technology expertise. The team spans operators, investors, and builders focused on solving the infrastructure challenges that prevent mainstream adoption of digital assets.

What you'll do

• Monitor, detect, and respond to security incidents across on-premise and cloud environments in real-time.
• Analyze security alerts and logs to identify potential threats, indicators of compromise, and suspicious behavioral patterns.
• Conduct proactive threat hunting using endpoint, network, and cloud data to uncover sophisticated cyber threats before they escalate.
• Perform forensic investigations and deep-dive analysis of security events to identify attack techniques, trends, and structural gaps.
• Develop and refine threat detection rules using frameworks like YARA, Sigma, and SQL-based approaches across multiple security layers.
• Automate threat detection and analysis workflows using Python, PowerShell, or Bash to improve response efficiency.
• Stay current on emerging threats and vulnerabilities, continuously improving detection and response strategies.

What you'll bring

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
• 3+ years of hands-on experience in security operations, threat hunting, or incident response roles.
• Proven proficiency with log analysis and detection engineering across cloud, endpoint detection and response (EDR), and network security tools.
• Strong expertise in MITRE ATT&CK frameworks and advanced threat detection methodologies.
• Solid understanding of network security monitoring, packet analysis, log correlation, and endpoint security principles.
• Proficiency in at least one scripting language such as Python, PowerShell, or Bash for automation.
• Experience with identity management, cloud security, vulnerability management, and threat intelligence.
• Excellent communication skills and ability to thrive in collaborative, fast-paced teams.

Nice to have

• Experience with threat intelligence platforms and frameworks.
• Familiarity with the Cyber Kill Chain methodology.
• Prior exposure to identity and access management systems.