Senior Security Operations Engineer

Company Description Paxos is a regulated blockchain infrastructure and tokenization platform that powers a faster, more efficient, and more inclusive financial system. The company partners with leading global enterprises such as PayPal, Interactive Brokers, Mastercard, Mercado Libre, and Nubank to tokenize, custody, and trade digital assets. Paxos is licensed to conduct virtual currency business and issues well-known assets including PayPal USD (PYUSD), Pax Dollar (USDP), Pax Gold (PAXG), and Global Dollar (USDG) across multiple jurisdictions and blockchains such as Solana. Prudentially regulated by authorities including FIN-FSA in Europe, the OCC in the United States, and MAS in Singapore, Paxos has raised over $500 million from prominent fintech investors. Team members join a mission-driven company replatforming global financial infrastructure for trustworthy, instant asset movement worldwide.
Role Description The Senior Security Operations Engineer is a full-time, hybrid role based in Israel, with flexibility for part-time work from home. This role is responsible for monitoring, investigating, and responding to security events across applications, networks, and infrastructure, using modern SIEM, SOAR, and endpoint protection tools. The engineer will design and improve detection rules, incident response playbooks, and security automation to reduce risk and enhance resilience. Daily work includes collaborating with engineering, product, and IT teams to implement secure configurations, support vulnerability management and penetration testing remediation, and ensure compliance with regulatory and internal security standards. The Senior Security Operations Engineer will also mentor peers, contribute to security architecture reviews, and help shape the organization’s security posture and best practices.
Qualifications

• Strong Application Security skills, including secure SDLC practices, secure coding review, and collaboration with development teams to harden services.
• Robust Network Security experience, including firewall and VPN configuration, intrusion detection/prevention, and network segmentation for cloud and on-prem environments.
• Deep Cybersecurity expertise in threat detection, incident response, SIEM/SOAR operations, and familiarity with common attack frameworks and TTPs.
• Security Engineering experience designing and implementing security controls, logging, monitoring, and automation across distributed systems.
• Solid Information Security knowledge, including risk assessment, security policies and standards, regulatory and compliance awareness, and best practices for data protection.
• Hands-on experience with cloud platforms (e.g., AWS, GCP, or Azure), containerized environments, and modern DevOps toolchains.
• Relevant certifications (e.g., CISSP, CISM, CEH, GSEC, OSCP, or similar) are beneficial.
• Ability to communicate clearly with technical and non-technical stakeholders, work effectively in hybrid teams