Security Operations Engineer

Who are we?

FalconX is a pioneering team of operators, investors, and builders committed to revolutionizing institutional access to the crypto markets. Operating at the intersection of traditional finance and 
cutting-edge technology, FalconX addresses the industry's foremost challenges: Navigating the digital asset market can be complex and fragmented, with limited products and services that support trading strategies, structures, and liquidity found in conventional financial markets. As a comprehensive solution for all digital asset strategies from start to scale, FalconX operates as the connective tissue empowering clients with seamless navigation through the ever-
evolving cryptocurrency landscape.

About the Role

We are seeking a highly skilled Security Operations & Threat Hunter with exceptional troubleshooting abilities and a deep understanding of both endpoint and cloud threats. The ideal candidate will be a key player in our Security Operations Center (SOC), proactively hunting for threats, analyzing security incidents, and ensuring the protection of our infrastructure across on-premise and cloud environments.

This role offers a distinct growth trajectory: beyond day-to-day triage and incident response, you will dedicate meaningful time to high-impact engineering projects, AI-driven security automation, and direct collaboration with senior engineering leadership.

Responsibilities

• Monitor, detect, and respond to security incidents across on-premise and cloud environments.
• Analyze security alerts from security tools to identify potential threats.
• Conduct forensic investigations and deep-dive analysis of security events to identify trends, attack techniques, and areas for improvement.
• Conduct proactive threat hunting across endpoint, network, and cloud environments to identify sophisticated cyber threats.
• Analyze security logs, behavioral patterns, and anomalies to detect indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).
• Investigate security incidents, perform forensic analysis, and provide actionable recommendations for mitigation and remediation.
• Develop and refine threat hunting methodologies, leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Automate threat detection and analysis using scripting languages such as Python, PowerShell, or Bash.
• Continuously monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).
• 3+ years of experience in security operations, threat hunting, or a similar cybersecurity role.
• Experience working with log data for detection and response across Cloud, EDR, Network, and related telemetry.
• Experience developing and deploying effective detection rules (e.g., YARA, Sigma, SQL-based rules, Network signatures).
• Strong understanding of network security monitoring, packet analysis, and log correlation.
• Deep understanding of advanced threat detection methodologies and threat intelligence.
• Proficiency in analyzing attacker tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.
• Proficiency in scripting and automation for security operations (Python, PowerShell, or Bash).
• Solid understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence.
• Strong communication skills, an inquisitive mindset, and the confidence to ask questions, challenge assumptions, and collaborate across teams.

Working Model & Schedule

• Global Exposure & Quarterly Rotations: To foster close alignment with our distributed engineering teams and US leadership, this role follows a structured quarterly time-zone rotation (rotating through San Francisco/PST, New York/EST, and local daytime business hours). This cadence provides direct access to senior leadership, high-visibility global projects, and cross-functional teams across the organization.
• Rotational On-Call Coverage: Shared participation in rotational weekend on-call pager duty to triage critical incidents alongside team members and leadership.
• Location & Hybrid Flexibility: Based in Bangalore. During local daytime business cycles, work on-site from our Bangalore office to build strong peer relationships and cross-functional connections; flexible remote arrangements apply during global and US-aligned cycles.

Notice at Collection and Privacy Policy

Applicants located in California and/or applying to a role based in California, please refer to our Notice at Collection and Privacy Policy here .

Inclusivity Statement

FalconX is committed to building a diverse, inclusive, equitable, and safe workspace for all people. Our roles are intended for people from all walks of life. We encourage all those interested in applying to our organization to submit an application regardless if you are missing some of the listed background requirements, skills, or experiences!

As part of our commitment to inclusivity, FalconX would like to acknowledge that the EEOC survey has limited potential responses that you can select. For legal reasons, FalconX must use this language to align with federal requirements, however, we want to ensure that you are able to provide a response to our own voluntary survey questions about your identity that best aligns with your most true self.

FalconX is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, national origin, ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, or any other legally-recognized protected basis under federal, state, or local law.

Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on FalconX. Please inform FalconX’s People team at recruiting@falconx.io, if you need assistance with participating in the application process.