11 days ago
Responsibilities
- Proactively identify and respond to security threats across cloud, endpoint, blockchain, and AI environments.
- Build detection and response capabilities for blockchain, custody, cloud-native, container, and AI-specific threats.
- Develop and maintain core SIEM and orchestration tooling and improve infrastructure logging and detection visibility.
- Lead security incident response, including investigations, cross-team collaboration, and incident command.
- Advance AI use in SOC detection triage, enrichment, and analyst-acceleration workflows.
- Develop techniques to identify anomalous behavior and attacks across the environment.
- Provide security guidance across the company and support threat modeling, vulnerability scanning, audits, and custom tool-building projects.
- Participate in on-call shifts every third week and provide occasional weekend and nighttime incident support.
Requirements
- 10+ years of experience in detection, response, or security engineering.
- 3+ years of experience commanding security incidents, especially incidents involving engineering.
- Deep AWS cloud security knowledge covering IAM, identity federation, KMS, EKS and container attack patterns, runtime exploitation, and CSPM tooling.
- Working knowledge of blockchain and crypto-native threats, including wallet and custody attacks, on-chain monitoring, protocol-level risks, and smart contract abuse.
- Hands-on experience using AI tooling and understanding risks involving shadow AI, agentic workflows, MCP and tool integrations, and AI-driven credential exposure.
- Extensive knowledge of SIEM, case management, and SOAR solutions.
- Knowledge of operating systems, file systems, and memory on macOS.
- Programming experience in Python, Golang, or similar programming languages.
- Experience building Detections as Code.
- Familiarity with Slack, Apple macOS, and GSuite.
- Strong collaboration, prioritization, independent problem-solving, and communication skills during high-stress situations.
- Experience defending blockchain, custody, or DeFi infrastructure is strongly preferred.
- Exposure to GCP or OCI is preferred.
Benefits
- Base pay range is €110,000.00–€170,000.00.
- Flexible remote work environment.
- On-call schedule is every third week, with occasional weekend and nighttime incident support.
- Equal opportunity employment and interview accommodations are available.
Tech Stack
Categories
