Security Operations Engineer (Web3)

Location: Hybrid in New York or San Francisco, United States

Salary: $160K–$180K per year, plus equity and bonus opportunities

Company

hirify.global provides Web3 infrastructure and developer tools for blockchain applications, supporting financial transactions, L2s, DeFi, and an AI-enabled decentralized ecosystem.

What you will do

• Triage alerts, hunt for suspicious activity, and investigate threats across cloud infrastructure, corporate systems, identity, endpoints, and production environments.
• Build and tune detections, onboard telemetry, maintain log pipelines, and test detection rules against attacks and benign activity.
• Participate in security on-call and incident response, including scoping, containment, recovery, evidence preservation, and post-incident improvements.
• Build AI-assisted workflows for evidence collection, alert enrichment, investigation timelines, and response preparation, with traceable results and human approval for disruptive actions.
• Partner with Infrastructure and IT on vulnerability remediation, cloud and host hardening, identity controls, attack-surface monitoring, and remediation verification.
• Improve team effectiveness through reusable code, runbooks, evaluation cases, pairing, code review, documentation, and defensive-outcome metrics.

Requirements

• Hands-on experience spanning security operations, detection engineering, threat hunting, and incident response.
• Strong scripting and software-building ability, especially Python, including APIs, version control, tests, and production automation.
• Experience with a SIEM such as Panther, Splunk, or an equivalent platform, including detection logic and log analysis.
• Working knowledge of cloud security, identity, endpoint telemetry, networking, and Linux systems, with the ability to investigate across system boundaries.
• Experience building and using AI-assisted tools in security or adjacent engineering work, including validating outputs, handling failures, and protecting sensitive information.
• Sound incident judgment: separating hypotheses from findings, preserving evidence, and deciding when to escalate or contain.
• Experience improving teammate effectiveness through tools, mentoring, code review, or documentation without management authority.
• Clear written communication and willingness to own urgent investigations and follow-through that prevents repeat incidents.
• Individual-contributor role with no people-management responsibilities; participation in the security on-call rotation is required.

Nice to have

• AWS, Kubernetes, bare-metal infrastructure, detection-as-code, or SOAR experience.
• Digital forensics, threat intelligence, or detection testing through attack simulation.
• Experience securing AI agents and tool integrations, including prompt injection, credential misuse, and data-exfiltration risks.
• Blockchain infrastructure experience or work with sensitive keys and high-impact production systems.

Culture & Benefits

• Private health insurance, gym reimbursement, commuter benefits, and flexible time off.
• In-office group meals and a learning and development stipend.
• Company-sponsored conferences and events.
• Books and audiobook subscription through Bookster.