SOC Analyst (00:00–09:00 UTC)

As a SOC Analyst at Tether, you monitor, triage, and investigate security events across the organization's environment as part of a global follow-the-sun Security Operations Center. Reporting to the SOC Lead, you focus on understanding what each alert means, investigating suspicious activity end to end, responding to real threats, and handing over cleanly between regions so nothing is lost across shifts.

What you'll do

• Monitor, triage, and analyze security alerts and events from the organization's security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms
• Investigate security incidents end to end, from initial triage through analysis, containment, eradication, and post-incident documentation, coordinating with relevant teams throughout
• Determine the scope, severity, and impact of security events, separating true positives from false positives and escalating confirmed incidents according to defined procedures
• Execute response actions within the security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions
• Ensure structured, high-quality shift handovers across regions in the follow-the-sun model, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock
• Proactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, mapping findings to frameworks such as MITRE ATT&CK
• Provide feedback on detection quality and contribute to the tuning of SIEM correlation rules, EDR custom detections, and WAF rules to reduce noise and improve coverage
• Enrich investigations with threat intelligence, including indicators of compromise, attacker techniques, and emerging campaigns relevant to the organization
• Develop and maintain technical documentation, standard operating procedures, and incident response playbooks
• Collaborate with IT, infrastructure, application, and security engineering teams to resolve incidents and support day-to-day operations
• Support vulnerability management and drive continuous improvement of the organization's overall security posture

What you bring

• Solid SOC experience
• A strong investigative mindset
• Ability to thrive in a fully remote setting where accuracy, discipline, and security are essential
• Excellent English communication skills

Nice to have

• Hands-on engineering experience with core security platforms

About Tether

Tether is a global fintech leader pioneering reserve-backed digital tokens and blockchain infrastructure. The company operates multiple divisions including Tether Finance (home to USDT, the world's most trusted stablecoin), Tether Power (sustainable energy solutions for Bitcoin mining), Tether Data (AI and peer-to-peer technology services including KEET), Tether Education, and Tether Evolution. The team is distributed globally and fully remote.