Senior Security Engineer (Web3)

TL;DR

Senior Security Engineer (Web3): Leading the Insider Trust Team's infrastructure to automate detection and investigation workflows with an accent on mitigating insider risks and intellectual property theft. Focus on architecting scalable detection strategies using Sigma and conducting deep technical forensics in macOS and cloud environments.

Location: Global remote-based (overlap with EST working hours is requested)

Salary: $110K – $269K

Company

Chainlink is the industry-standard oracle platform bringing the capital markets onchain and powering the majority of decentralized finance (DeFi).

What you will do

• Own and lead the construction of Insider Trust Team infrastructure to automate end-to-end detection and investigation workflows.
• Develop, measure, and tune detection rules in Sigma to ensure sustainable security operations.
• Drive projects targeting insider risks, including access abuse and intellectual property theft within the blockchain/Web3 space.
• Collaborate with Threat Management, Legal, IT, and Engineering teams to provide technical expertise for insider investigations.
• Conduct sensitive interviews and technical fact-finding during insider threat incidents.
• Proactively identify and implement modernization and improvement areas for security workflows.

Requirements

• 7+ years of experience conducting technical investigations in an Insider Threat capacity.
• Deep expertise in macOS environments, including log collection, analysis, and digital forensics.
• Strong knowledge of Insider Threat tactics, attack paths, and data exfiltration techniques.
• Broad familiarity with conducting insider threat investigations within modern cloud infrastructure.
• Must be able to overlap some working hours with Eastern Standard Time (EST).

Nice to have

• Prior success as a self-starter in remote-first security engineering environments.
• Scripting experience (Python, Bash) for data parsing and automation.
• Experience with detection-as-code workflows using Sigma.
• Domain expertise in blockchain and Web3 specific threats.
• Experience using AI technology to augment and enhance security investigations.

Culture & Benefits

• Competitive cash compensation and long-term incentives.
• Comprehensive benefits package.
• Remote-first work culture.
• Opportunity to work on industry-standard infrastructure securing the majority of DeFi.