Security Operations Engineer

About the role

We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world’s leading financial institutions, like Mastercard, Visa, Robinhood, and PayPal.

The Opportunity

As a Security Operations Engineer, you will serve on the front lines of our security program, helping protect the organization by detecting, investigating, and containing threats across our endpoints, cloud infrastructure, and network. You will act as both an investigator and a builder: triaging and resolving security incidents with precision while continuously improving detections and automations that help the team move faster and operate more effectively. This role is central to our day-to-day security posture, turning alerts into meaningful action.

What You'll Do

• Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry.

• Take a builder’s mindset to the role by automating repetitive workflows and using AI to increase speed, scale, and effectiveness.

• Execute containment and remediation actions for confirmed incidents, while following and continuously improving established runbooks.

• Tune and maintain SIEM and EDR detections to reduce false positives, strengthen signal quality, and close coverage gaps.

• Apply threat intelligence, including IOCs and TTPs, to active investigations and ongoing monitoring.

• Participate in the on-call rotation and contribute clear, actionable post-incident documentation.

About You

• You bring 3+ years of experience in security operations, detection and response, or a related security engineering role.

• You have experience investigating and responding to security threats across endpoints, cloud environments, and network telemetry.

• You bring strong analytical judgment and a calm, methodical approach to triaging alerts and driving incidents through resolution.

• You have hands-on experience with SIEM and EDR platforms, including tuning detections to improve signal quality and reduce false positives.

• You think like a builder and look for opportunities to automate repetitive work, including using AI to improve speed and scale.

• You are comfortable applying threat intelligence, including IOCs and TTPs, to investigations and proactive monitoring.

• You are prepared to participate in an on-call rotation and can document incidents clearly and effectively to support continuous improvement.

Important Notice for Paxos Applicants

We’ve become aware of fraudulent accounts posting as Paxos recruiters on LinkedIn and other platforms. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information.

To verify a legitimate Paxos recruiter:

• We only use @paxos.com email addresses

• We never ask for payment or financial details to apply, interview, or work here

• For technical roles, we do not perform a coding interview without prior screening by our engineering team

Thanks for your interest in Paxos!