SOC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
SOC Analyst monitoring Consensys’s blockchain infrastructure, enterprise systems, and Web3 protocols. Detecting threats, responding to incidents, and securing Linea and Lineth ZK-rollup ecosystems.
Responsibilities:
- Architect and maintain centralized log collection, SIEM integration, and incident response services across AWS and corporate IT services
- Develop custom detection rules and alert logic for unauthorized access, privilege escalation, credential compromise, and anomalous user activity
- Ensure security logging visibility, audit readiness, and access control management across corporate platforms
- Establish real-time security monitoring for Linea mainnet and the Lineth ZK rollup stack
- Monitor RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry
- Collaborate with DevOps and core engineering teams to detect and mitigate infrastructure threats, DDoS attacks, and zero-day vulnerabilities
- Implement and tune Web3 threat monitoring platforms including Hypernative, Hexagate, and Blockaid
- Build automated alerts for suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge activity
- Perform onchain forensics and transaction trace analysis
- Serve as a primary responder for alerts across IT SaaS, cloud infrastructure, and Web3 protocol layers
- Manage on-call rotations and incident management using Grafana Cloud IRM
- Lead triage, investigation, containment, and post-mortem root cause analysis
- Conduct proactive threat hunting across system logs, cloud environments, and onchain transaction streams
- Automate incident response playbooks and triage workflows using SOAR tools and custom scripts
- Refine detection rules to reduce false positives and improve MTTD and MTTR
- Integrate automated containment across access management, cloud IAM, and Web3 security providers
- Maintain incident records, forensic evidence, and documentation aligned with SOC2 and ISO compliance frameworks
- Prepare security operational metrics, alert volume analysis, and threat reports for leadership
- Monitor Web3 threat landscapes and emerging exploit techniques and threat actors
- Coordinate with external security researchers, bug bounty programs, and Web3 security alliances
- Participate in incident response drills, security reviews, and audit remediation
- Report to the Head of Security and serve as founding member of the incident response team
Requirements:
- 3–5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 environments
- Hands-on experience configuring and maintaining monitoring, threat detection, and incident analysis services for AWS, including Amazon GuardDuty and AWS CloudTrail
- Experience with enterprise IT platforms including JumpCloud, Google Workspace, GitHub, Notion, and Zoom
- Direct experience using Hypernative, Hexagate, and Blockaid
- Deep technical understanding of Ethereum, L2 scaling architectures, ZK-rollups, the Lineth stack, Besu execution, prover systems, and smart contract vulnerabilities
- Proficiency in log management, monitoring platforms such as Grafana, SIEM/SOAR platforms, and Python, Go, Bash, or SQL
- Familiarity with SOC2, ISO 27001, NIST, or SANS security frameworks
- Strong communication, problem-solving, and analytical skills
- Ability to work in a fast-paced, remote-first environment
Benefits:
- Competitive compensation package, including salary, benefits, and performance-based incentives
- Meaningful equity
- Fully remote, globally distributed work environment
- Asynchronous work
- Opportunity to work on genuinely open source software
- Equal opportunities and inclusive environment
Similar Jobs
Senior Manager, A&D Security Operations
Senior Manager leading acquisition and divestiture cybersecurity operations for Johnson & Johnson’s global healthcare businesses. Managing transaction portfolios, risk governance, post-close coordination, and operational maturity.
Senior Manager, A&D Security Operations
Senior Manager leading cybersecurity operations for Johnson & Johnson acquisitions and divestitures. Managing transaction portfolios, risk governance, integrations, and executive reporting.
Cloud Architect – Operations, Security Governance
Cloud Architect definiendo modelos operativos, madurez de seguridad y roadmaps para Landing Zones AWS empresariales en Keppri. Impulsando gobierno, resiliencia, automatización y estandarización cloud.
Director, Global Security Operations Center
Director leading Twilio’s 24/7/365 global security operations center. Protecting Twilio’s communications technology, people, assets, and operations through intelligence-driven physical security.
Security Operations Analyst L2 – SOC
Security Operations Analyst monitoring alerts, investigating incidents, and maintaining compliance for Supply Chimp’s US government supply and logistics operations. Improving security tools, documentation, and controls remotely from Colombia.
Network Operations Security Engineer
Network Operations Security Engineer securing AXON Networks’ AI-driven ISP orchestration platform, routers, cloud, and Kubernetes services. Coordinating vulnerability remediation, incident readiness, and production security across North America.
Security Operations Team Lead
Security Operations Team Lead leading incident response, agentic SOC operations, and security engineering at Cyera. Securing enterprise AI adoption through internal customer-zero operations.
SecOps Engineer
SecOps Engineer monitoring threats and managing security operations for compliance software serving 50,000+ organisations globally. Supporting incident response, vulnerability management, cloud security, and regulatory compliance.
IAM Security Operations Engineer – Middle
IAM Security Operations Engineer maintaining secure identity services for SOFTSWISS. Managing JML lifecycle processes, RBAC access, Keycloak, Adaxes, and IAM integrations.
Blue Team Analyst – SOC
Analista Blue Team monitorando eventos, ameaças e incidentes em SOC para a It4us Cyber Security. Operação remota com ferramentas SIEM e suporte a clientes.
SOC Analyst II
SOC Analyst II protecting small and medium-sized businesses with enterprise-class cybersecurity. Leading threat investigations, incident response, threat hunting, and vulnerability management.
Manager, Information Security Operations
Information Security Operations Manager leading Malwarebytes’ global Security Operations team. Owning SIEM, incident response, vulnerability management, threat hunting, DLP, and AI security for its cybersecurity business.
Manager, Information Security Operations
Security operations manager leading global SecOps, incident response, and threat management for Malwarebytes cybersecurity and ThreatDown MDR. Building resilient 24x7 protection across distributed teams and systems.
Senior SOC Analyst
Senior SOC Analyst leading high-severity investigations, threat hunting, malware analysis, and forensics. Strengthening detection and response for DeepSeas’ global cybersecurity clients.
SOC Analyst, SIEM Engineer
SOC Analyst/SIEM Engineer monitoring and improving security systems for secupay AG, a German omnichannel payments provider. Investigating incidents and optimizing FortiSIEM detection capabilities.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across EDR, SIEM, firewall, IPS, and WAF platforms. Providing actionable incident findings and remediation guidance for Workstreet’s cybersecurity and compliance clients.
Security Operations AI Engineer – Contract
Security Operations AI Engineer securing enterprise AI/ML systems for 66degrees, an AI transformation partner. Building detection pipelines, incident playbooks, and governance controls for emerging AI threats.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.