SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
FalconX is a pioneering institutional crypto trading platform operating at the intersection of traditional finance and digital assets. The company provides comprehensive solutions for digital asset strategies, serving as connective infrastructure for navigating the cryptocurrency landscape.
You will join the Security Operations Center as a Security Operations Engineer & Threat Hunter, responsible for protecting FalconX's infrastructure across on-premise and cloud environments. This is a hands-on role combining incident response, forensic investigation, and proactive threat hunting.
Key Responsibilities:
- Monitor, detect, and respond to security incidents across on-premise and cloud environments
- Analyze security alerts from security tools to identify potential threats
- Conduct forensic investigations and deep-dive analysis of security events to identify trends, attack techniques, and improvement areas
- Perform proactive threat hunting across endpoint, network, and cloud environments to identify sophisticated cyber threats
- Analyze security logs, behavioral patterns, and anomalies to detect indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
- Investigate security incidents, perform forensic analysis, and provide actionable mitigation and remediation recommendations
- Develop and refine threat hunting methodologies leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain
- Automate threat detection and analysis using scripting languages such as Python, PowerShell, or Bash
- Continuously monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies
Requirements:
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience)
- 3+ years of experience in security operations, threat hunting, or similar cybersecurity role
- Experience working with log data for detection and response (Cloud, EDR, Network, and more)
- Experience developing and deploying effective detection rules (Yara, Sigma, SQL-based rules, Network, etc.)
- Strong understanding of network security monitoring, packet analysis, and log correlation
- Deep understanding of advanced threat detection methodologies and threat intelligence
- Proficiency in analyzing attacker tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK
- Proficiency in scripting and automation for security operations (Python, PowerShell, or Bash)
- Understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence
- Excellent communication skills and ability to work collaboratively in a fast-paced environment
