Sr SOC Engineer

Job Summary

Liminal Custody is looking for a Senior Security Operations Engineer to join our security team and help protect critical cloud, application, and blockchain infrastructure. This isnt a traditional SOC role. You will be hands-on with incident response, detection engineering, threat intelligence, threat hunting, and security automation -helping us build a security operation capable of detecting and responding to sophisticated attacks against digital asset infrastructure.

Responsibilities

• Investigate and respond to security incidents across cloud, applications, infrastructure, and blockchain environments.
• Design, develop, and continuously improve security detections and monitoring use cases.
• Build and tune detections using Elastic and Datadog.
• Conduct proactive threat hunting based on threat intelligence and attacker TTPs.
• Translate threat intelligence into actionable detections, IOCs, and response capabilities.
• Improve security visibility and telemetry across our AWS and blockchain infrastructure.
• Develop automation for alert enrichment, investigation, and incident response.
• Perform root-cause analysis and drive remediation following security incidents.
• Work closely with Engineering, DevOps, Platform, and Security teams to strengthen our overall security posture.

Desired Candidate Profile

• 5-7 years of experience in Security Operations, Detection Engineering, Incident Response, Threat Hunting, or Security Engineering.
• Strong hands-on experience with SIEM, security monitoring, and log analysis.
• Experience with Elastic / Elasticsearch / Kibana and Datadog.
• Strong understanding of Incident Response and MITRE ATTCK.
• Experience building and tuning security detections.
• Good understanding of AWS, Linux, networking, and cloud security.
• Strong scripting/automation skills in Python, Bash, or similar.
• Strong analytical and investigative mindset with the ability to independently handle security incidents

Good to Have

• Experience with Web3, blockchain, cryptocurrency, or digital asset security.
• Experience with AWS security services such as CloudTrail, GuardDuty, Security Hub, and VPC Flow Logs.
• Experience with threat hunting, SOAR, EDR/XDR, Sigma, YARA, or Suricata.
• Security certifications such as GCIH, GCIA, GCFA, Security+, CySA+, or equivalent.

Disclaimer: This job posting & Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.