<div class="content-intro"><p><strong>Who are we?</strong></p> <p>FalconX is a pioneering team of operators, investors, and builders committed to revolutionizing institutional access to the crypto markets. Operating at the intersection of traditional finance and cutting-edge technology, FalconX addresses the industry's foremost challenges: Navigating the digital asset market can be complex and fragmented, with limited products and services that support trading strategies, structures, and liquidity found in conventional financial markets. As a comprehensive solution for all digital asset strategies from start to scale, FalconX operates as the connective tissue empowering clients with seamless navigation through the ever- evolving cryptocurrency landscape.</p></div><h2 data-path-to-node="1">About the Role</h2> <p data-path-to-node="2">We are seeking a highly skilled Security Operations & Threat Hunter with exceptional troubleshooting abilities and a deep understanding of both endpoint and cloud threats. The ideal candidate will be a key player in our Security Operations Center (SOC), proactively hunting for threats, analyzing security incidents, and ensuring the protection of our infrastructure across on-premise and cloud environments.</p> <p data-path-to-node="3">This role offers a distinct growth trajectory: beyond day-to-day triage and incident response, you will dedicate meaningful time to high-impact engineering projects, AI-driven security automation, and direct collaboration with senior engineering leadership.</p> <h2 data-path-to-node="5">Responsibilities</h2> <ul data-path-to-node="6"> <li> <p data-path-to-node="6,0,0">Monitor, detect, and respond to security incidents across on-premise and cloud environments.</p> </li> <li> <p data-path-to-node="6,1,0">Analyze security alerts from security tools to identify potential threats.</p> </li> <li> <p data-path-to-node="6,2,0">Conduct forensic investigations and deep-dive analysis of security events to identify trends, attack techniques, and areas for improvement.</p> </li> <li> <p data-path-to-node="6,3,0">Conduct proactive threat hunting across endpoint, network, and cloud environments to identify sophisticated cyber threats.</p> </li> <li> <p data-path-to-node="6,4,0">Analyze security logs, behavioral patterns, and anomalies to detect indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs).</p> </li> <li> <p data-path-to-node="6,5,0">Investigate security incidents, perform forensic analysis, and provide actionable recommendations for mitigation and remediation.</p> </li> <li> <p data-path-to-node="6,6,0">Develop and refine threat hunting methodologies, leveraging frameworks like MITRE ATT&CK and the Cyber Kill Chain.</p> </li> <li> <p data-path-to-node="6,7,0">Automate threat detection and analysis using scripting languages such as Python, PowerShell, or Bash.</p> </li> <li> <p data-path-to-node="6,8,0">Continuously monitor emerging threats, vulnerabilities, and attack trends to improve detection and response strategies.</p> </li> </ul> <h2 data-path-to-node="8">Qualifications</h2> <ul data-path-to-node="9"> <li> <p data-path-to-node="9,0,0">Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).</p> </li> <li> <p data-path-to-node="9,1,0">3+ years of experience in security operations, threat hunting, or a similar cybersecurity role.</p> </li> <li> <p data-path-to-node="9,2,0">Experience working with log data for detection and response across Cloud, EDR, Network, and related telemetry.</p> </li> <li> <p data-path-to-node="9,3,0">Experience developing and deploying effective detection rules (e.g., YARA, Sigma, SQL-based rules, Network signatures).</p> </li> <li> <p data-path-to-node="9,4,0">Strong understanding of network security monitoring, packet analysis, and log correlation.</p> </li> <li> <p data-path-to-node="9,5,0">Deep understanding of advanced threat detection methodologies and threat intelligence.</p> </li> <li> <p data-path-to-node="9,6,0">Proficiency in analyzing attacker tactics, techniques, and procedures (TTPs) based on frameworks like MITRE ATT&CK.</p> </li> <li> <p data-path-to-node="9,7,0">Proficiency in scripting and automation for security operations (Python, PowerShell, or Bash).</p> </li> <li> <p data-path-to-node="9,8,0">Solid understanding of endpoint security, identity management, cloud security, detection engineering, vulnerability management, incident response, and threat intelligence.</p> </li> <li> <p data-path-to-node="9,9,0">Strong communication skills, an inquisitive mindset, and the confidence to ask questions, challenge assumptions, and collaborate across teams.</p> </li> </ul> <h2 data-path-to-node="11">Working Model & Schedule</h2> <ul data-path-to-node="12"> <li> <p data-path-to-node="12,0,0"><strong data-path-to-node="12,0,0" data-index-in-node="0">Global Exposure & Quarterly Rotations:</strong> To foster close alignment with our distributed engineering teams and US leadership, this role follows a structured quarterly time-zone rotation (rotating through San Francisco/PST, New York/EST, and local daytime business hours). This cadence provides direct access to senior leadership, high-visibility global projects, and cross-functional teams across the organization