SOC Analyst

This is a fully remote position, open to applicants in Europe.

📋 Description

• Design and oversee centralized log collection, SIEM integration, and incident response services across AWS and corporate IT infrastructures.

• Create custom detection rules and alert mechanisms for unauthorized access, privilege escalation, credential compromise, and unusual user activities.

• Ensure visibility in security logging, audit preparedness, and access control management across corporate platforms.

• Implement real-time security monitoring for the Linea mainnet and the Lineth ZK rollup stack.

• Supervise RPC endpoints, sequencer performance, L1/L2 messaging reliability, state root finalization, and infrastructure telemetry.

• Collaborate with DevOps and core engineering teams to identify and counter infrastructure threats, DDoS attacks, and zero-day vulnerabilities.

• Deploy and fine-tune Web3 threat monitoring platforms such as Hypernative, Hexagate, and Blockaid.

• Create automated alerts for suspicious smart contract interactions, flash loan attacks, reentrancy exploits, liquidity drains, and unauthorized bridge operations.

• Conduct on-chain forensics and transaction trace analysis.

• Act as the primary responder for alerts across IT SaaS, cloud infrastructure, and Web3 protocol layers.

• Manage on-call rotations and incident management utilizing Grafana Cloud IRM.

• Lead triage, investigation, containment, and post-mortem root cause analysis.

• Engage in proactive threat hunting across system logs, cloud environments, and on-chain transaction streams.

• Automate incident response playbooks and triage workflows with SOAR tools and custom scripts.

• Enhance detection rules to minimize false positives and improve MTTD and MTTR.

• Integrate automated containment across access management, cloud IAM, and Web3 security providers.

• Maintain incident records, forensic evidence, and documentation in accordance with SOC2 and ISO compliance frameworks.

• Generate security operational metrics, alert volume analyses, and threat reports for leadership.

• Monitor Web3 threat landscapes, emerging exploit techniques, and threat actors.

• Coordinate with external security researchers, bug bounty programs, and Web3 security alliances.

• Participate in incident response drills, security reviews, and audit remediation.

• Report to the Head of Security and be a founding member of the incident response team.

⛳️ Requirements

• 3–5+ years of experience in Security Operations, Detection Engineering, or Incident Response within cloud-native or Web3 settings.

• Practical experience in configuring and maintaining monitoring, threat detection, and incident analysis services for AWS, including Amazon GuardDuty and AWS CloudTrail.

• Familiarity with enterprise IT platforms like JumpCloud, Google Workspace, GitHub, Notion, and Zoom.

• Direct experience with Hypernative, Hexagate, and Blockaid.

• In-depth technical knowledge of Ethereum, L2 scaling architectures, ZK-rollups, the Lineth stack, Besu execution, prover systems, and smart contract vulnerabilities.

• Proficient in log management and monitoring platforms such as Grafana, as well as SIEM/SOAR platforms, and programming languages like Python, Go, Bash, or SQL.

• Knowledge of SOC2, ISO 27001, NIST, or SANS security frameworks.

• Excellent communication, problem-solving, and analytical abilities.

• Capacity to thrive in a fast-paced, remote-first work environment.

🏝️ Benefits

• Competitive compensation package, including salary, benefits, and performance-based incentives.

• Meaningful equity opportunities.

• Fully remote, globally distributed work environment.

• Asynchronous work model.

• Opportunity to contribute to genuinely open-source software.

• Commitment to equal opportunities and an inclusive workplace.