Remote job
SOC Analyst
Job details
About this role
Role overview Build and operate security monitoring and incident response across cloud services, corporate systems, blockchain infrastructure, and on-chain activity. This role combines detection engineering, threat hunting, incident handling, and compliance reporting, and is expected to help establish the incident response function.
Responsibilities - Centralize security logging and connect AWS and enterprise services to monitoring and SIEM workflows. - Develop detections for unauthorized access, privilege escalation, compromised credentials, and unusual activity. - Monitor blockchain and Web3 environments for threats to network infrastructure, smart contracts, and ecosystem protocols. - Triage, investigate, contain, and document incidents; lead root-cause reviews and threat hunts across logs, cloud systems, and on-chain data. - Automate response playbooks and improve detections to reduce false alerts and response times. - Maintain forensic records and operational metrics, support audit remediation, and coordinate threat intelligence with external researchers and security groups.
Requirements - Three to five or more years in security operations, detection engineering, or incident response in cloud-native or Web3 environments. - Hands-on AWS security monitoring experience, including services such as GuardDuty and CloudTrail, and familiarity with enterprise identity and collaboration platforms. - Direct use of on-chain monitoring or Web3 security tools. - Strong understanding of Ethereum, Layer 2 systems, zero-knowledge rollups, and smart contract vulnerabilities. - Experience with log management, monitoring, SIEM/SOAR, and scripting in languages such as Python, Go, Bash, or SQL. - Familiarity with SOC 2, ISO 27001, NIST, or SANS frameworks, plus strong analytical and communication skills.
Benefits and work setup - Fully remote, globally distributed team with asynchronous work. - The role collaborates closely with Security, DevOps, and SRE, and is described as a founding member of the incident response team. - Compensation, benefits, and performance-based incentives are listed.