About
Consensys Incorporated builds and operates institutional-grade blockchain infrastructure connecting financial institutions to digital asset networks. It focuses on privacy, scalability, resilience, security, and regulatory readiness.
Responsibilities
•Architect and maintain centralized log collection, SIEM integration, and incident response services across AWS and corporate IT services
•Develop detection rules and alert logic for unauthorized access, privilege escalation, credential compromise, and anomalous user activity
•Ensure security logging visibility, audit readiness, and access control management across corporate platforms
•Establish real-time security monitoring for Linea mainnet and the open-source Lineth ZK rollup stack
•Monitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry
•Collaborate with DevOps and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities
•Implement and tune real-time Web3 threat monitoring platforms
•Build automated alerts for suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity on Linea mainnet
•Perform onchain forensics and transaction trace analysis to safeguard ecosystem DeFi protocols and institutional assets
•Respond to security alerts from IT SaaS, cloud infrastructure, and Web3 protocol layers, using Grafana Cloud IRM to manage on-call rotations and incidents
•Lead triage, investigation, containment, and post-mortem root cause analysis for confirmed security incidents
•Conduct proactive threat hunting across system logs, cloud environments, and onchain transaction streams
•Automate incident response playbooks and triage workflows using SOAR tools and custom scripts
•Refine detection rules to reduce false positives and improve MTTD and MTTR
•Integrate automated containment mechanisms across access management, cloud IAM, and Web3 security providers
•Maintain incident records, forensic evidence, and documentation aligned with SOC2 and ISO compliance frameworks
•Prepare security operational metrics, alert volume analysis, and threat reports for leadership
•Ensure compliance with corporate security policies and access controls across all environments
•Monitor Web3 threat landscapes, tracking emerging smart contract exploit techniques and threat actors targeting L2 ecosystems
•Coordinate with external security researchers, bug bounty programs, and Web3 security alliances to share intelligence
•Participate in incident response drills, security reviews, and audit remediation with external security partners
Requirements
•3–5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments
•Hands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS and enterprise IT platforms
•Direct experience using Web3 security and onchain monitoring tools such as Hypernative, Hexagate, and Blockaid
•Deep technical understanding of Ethereum, L2 scaling architectures, ZK-rollups, and smart contract vulnerabilities
•Proficiency in log management, monitoring platforms, SIEM/SOAR platforms, and scripting languages such as Python, Go, Bash, or SQL
•Familiarity with SOC2, ISO 27001, NIST, or SANS security frameworks
•Strong communication, problem-solving, and analytical skills
Conditions
•Competitive compensation package, including salary, benefits, and performance-based incentives
•Meaningful equity
•Opportunity to work on open-source software
•Founding member of the incident response team, working closely with the DevOps team, Head of Security, and Site Reliability Engineer
