SOC Analyst

About the Company At Tether, we're not just building products, we're pioneering a global financial revolution. Our cutting-edge solutions empower businesses—from exchanges and wallets to payment processors and ATMs—to seamlessly integrate reserve-backed tokens across blockchains. By harnessing the power of blockchain technology, Tether enables you to store, send, and receive digital tokens instantly, securely, and globally, all at a fraction of the cost. Transparency is the bedrock of everything we do, ensuring trust in every transaction. Our team is a global talent powerhouse, working remotely from every corner of the world. We've grown fast, stayed lean, and secured our place as a leader in the industry. Tether Finance Our innovative product suite features the world's most trusted stablecoin, USDT , relied upon by hundreds of millions worldwide, alongside pioneering digital asset tokenization services. Tether Power Driving sustainable growth, our energy solutions optimize excess power for Bitcoin mining using eco-friendly practices in state-of-the-art, geo-diverse facilities. Tether Data Fueling breakthroughs in AI and peer-to-peer technology, we reduce infrastructure costs and enhance global communications with cutting-edge solutions like KEET , our flagship app that redefines secure and private data sharing. Tether Education Democratizing access to top-tier digital learning, we empower individuals to thrive in the digital and gig economies, driving global growth and opportunity. Tether Evolution At the intersection of technology and human potential, we are pushing the boundaries of what is possible, crafting a future where innovation and human capabilities merge in powerful, unprecedented ways. Role Overview The SOC Analyst is responsible for the continuous monitoring, triage, and investigation of security events across the organization's environment, as part of a global follow-the-sun Security Operations Center. This position reports to the SOC Lead. The role goes beyond acknowledging alerts: the focus is on understanding what each alert means, investigating suspicious activity end to end, responding to real threats, and handing over cleanly between regions so that nothing is lost across shifts. The ideal candidate has solid SOC experience, a strong investigative mindset, and thrives in a fast-paced, fully remote setting where accuracy, discipline, and security are essential. Hands-on engineering experience with core security platforms is a big plus. Responsibilities Monitor, triage, and analyze security alerts and events from the organization's security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms. Investigate security incidents end to end, from initial triage through analysis, containment, eradication, and post-incident documentation, coordinating with relevant teams throughout. Determine the scope, severity, and impact of security events, separating true positives from false positives and escalating confirmed incidents according to defined procedures. Execute response actions within the security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions. Ensure structured, high-quality shift handovers across regions in the follow-the-sun model, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock. Proactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, mapping findings to frameworks such as MITRE ATT&CK. Provide feedback on detection quality and contribute to the tuning of SIEM correlation rules, EDR custom detections, and WAF rules to reduce noise and improve coverage. Enrich investigations with threat intelligence, including indicators of compromise, attacker techniques, and emerging campaigns relevant to the organization. Develop and maintain technical documentation, standard operating procedures, and incident response playbooks. Collaborate with IT, infrastructure, application, and security engineering teams to resolve incidents and support day-to-day operations. Support vulnerability management and drive continuous improvement of the organization's overall security posture. Requirements Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience). At least 3 years of hands-on experience as a SOC Analyst, triaging alerts and investigating security incidents in a production environment. Solid working knowledge of core security technologies such as EDR, SSE, SIEM, and WAF, and of how to use them to investigate and respond to threats. Hands-on experience implementing, configuring, and tuning these platforms, or writing and tuning detection content, is a big plus. Experience with incident response and threat hunting, ideally with familiarity with the MITRE ATT&CK framework. Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles. Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are a plus. Strong analytical, troubleshooting, and problem-solving skills with a high attention to detail. Ability to handle sensitive information responsibly and securely. Good written and verbal communication skills in English, and the ability to work effectively across technical and non-technical teams and across time zones. About You You are a hands-on security analyst who wants to understand what is really happening behind an alert, rather than only closing tickets. You dig into the data, follow the evidence, and know when and how to escalate. If you have also stood up or tuned the tools you work with, or written your own detections, even better. You are structured, reliable, and comfortable working independently in a remote, follow-the-sun team, and you take pride in leaving a clear handover for the next shift. You are curious about new threats and technologies, and you enjoy working closely with both technical teams and end users to raise the security bar across the environment. Why Join Us? Our team is a global talent powerhouse, working remotely from every corner of the world. If you're passionate about making a mark in the fintech space, this is your opportunity to collaborate with some of the brightest minds, pushing boundaries and setting new standards. If you have excellent English communication skills and are ready to contribute to the most innovative platform on the planet, Tether is the place for you. Important Information for Candidates Recruitment scams have become increasingly common. To protect yourself, please keep the following in mind when applying for roles: Apply only through our official channels. We do not use third-party platforms or agencies for recruitment unless clearly stated. All open roles are listed on our official careers page: https://tether.recruitee.com/ Verify the recruiter's identity. All our recruiters have verified LinkedIn profiles. If you're unsure, you can confirm their identity by checking their profile or contacting us through our website. Be cautious of unusual communication methods. We do not conduct interviews over WhatsApp, Telegram, or SMS. All communication is done through official company emails and platforms. Double-check email addresses. All communication from us will come from emails ending in @tether.to or @tether.io We will never request payment or financial details. If someone asks for personal financial information or payment at any point during the hiring process, it is a scam. Please report it immediately. How to Apply When in doubt, feel free to reach out through our official website.